Non notée
CVE-2019-1137 A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a…
Description
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Exchange Server 2016 | Versions non publiées | |
| Microsoft Exchange Server 2019 | Versions non publiées | |
| Microsoft Exchange Server 2013 | Versions non publiées |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Exchange Server 2016
Les 10 CVE de Microsoft Exchange Server 2016 →
CVE-2019-1373
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via…
Non notée
CVE-2019-1266
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web…
Non notée
CVE-2019-1233
A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly…
Non notée
CVE-2019-1136
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of…
Non notée