Puansız

CVE-2019-0858

Microsoft Microsoft Exchange Server; Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2013; Microsoft Microsoft Exchange Server 2019 Yayım: 2019-04-09 23:19 (7 yıl önce)

Açıklama

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0817.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Microsoft	Microsoft Exchange Server	2019
Microsoft	Microsoft Exchange Server 2013	Cumulative Update 22
Microsoft	Microsoft Exchange Server 2016	Cumulative Update 11, Cumulative Update 12
Microsoft	Microsoft Exchange Server 2019	Cumulative Update 1

Kaynaklar ve yamalar

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0858

CVSS puanı

Henüz puanlanmadı. CNA, CISA veya NVD puan verdiğinde burada görünür.

EPSS (30 günde istismar olasılığı)

2.10%

tüm CVE'lerin %82'inden yüksek

Zaman çizelgesi

Numara ayrıldı2018-11-26
Yayımlandı2019-04-09 23:19
IP-DB'ye ulaştı2026-10-24 23:51
Son güncelleme2024-08-04 20:58

Numarayı veren (CNA): microsoft

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Microsoft Exchange Server

9.3Kritik

CVE-2026-70279 27 gün önce

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

1.3%EPSS

8.1Yüksek

CVE-2026-70571 27 gün önce

Microsoft Exchange Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

1.4%EPSS

8.8Yüksek

CVE-2026-77910 27 gün önce

Microsoft Exchange Server Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

7.8Yüksek

CVE-2026-87692 27 gün önce

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server Subscription Edition RTM

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

2.3%EPSS

7.8Yüksek

CVE-2026-87695 27 gün önce

Microsoft Exchange Server Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

7.5Yüksek

CVE-2026-87696 27 gün önce

Microsoft Exchange Server Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.