Multiple vulnerabilities in Microsoft Exchange Server

Описание

Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely via specially crafted web to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Microsoft Exchange can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2019-1137
  CVE-2019-1136
  CVE-2019-1084
  ADV190021
  

Связанные продукты

• Microsoft-Exchange-Server

Список CVE

• CVE-2019-1084
  warning
• CVE-2019-1137
  warning
• CVE-2019-1136
  high

Список KB

• 4509410
• 4509409
• 4509408

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com