Multiple vulnerabilities in Microsoft Exchange Server

Descripción

Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely via specially crafted web to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Microsoft Exchange can be exploited remotely to obtain sensitive information.

Notas informativas originales

• CVE-2019-1137

• CVE-2019-1136
• CVE-2019-1084
• ADV190021

Productos relacionados

• Microsoft-Exchange-Server

Lista CVE

• CVE-2019-1084
  warning
• CVE-2019-1137
  warning
• CVE-2019-1136
  high

Lista KB

• 4509410
• 4509409
• 4509408

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com