VendorsMicrosoftexchange_server2019
Vulnerabilities

Microsoft Exchange Server 2019

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

134CVEs
CVE-2019-1266
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.
Published 2019-09-11 · Modified
6.1EPSS 0.020
CVE-2026-45500
Microsoft Exchange Server Spoofing Vulnerability
Published 2026-06-09 · Analyzed
6.1EPSS 0.004
CVE-2019-0817
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858.
Published 2019-04-09 · Modified
5.8EPSS 0.023
CVE-2021-1730
Microsoft Exchange Server Spoofing Vulnerability
Published 2021-02-25 · Modified
5.8EPSS 0.018
CVE-2023-36777
Microsoft Exchange Server Information Disclosure Vulnerability
Published 2023-09-12 · Modified
5.7EPSS 0.520
CVE-2022-21979
Microsoft Exchange Server Information Disclosure Vulnerability
Published 2022-08-09 · Modified
5.7EPSS 0.021
CVE-2020-17083
Microsoft Exchange Server Remote Code Execution Vulnerability
Published 2020-11-11 · Modified
5.5EPSS 0.120
CVE-2020-0903
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published 2020-03-12 · Modified
5.4EPSS 0.016
CVE-2019-1137
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published 2019-07-29 · Modified
5.4EPSS 0.016
CVE-2022-34692
Microsoft Exchange Server Information Disclosure Vulnerability
Published 2022-08-09 · Modified
5.3EPSS 0.017
CVE-2025-25006
Microsoft Exchange Server Spoofing Vulnerability
Published 2025-08-12 · Analyzed
5.3EPSS 0.009
CVE-2025-25007
Microsoft Exchange Server Spoofing Vulnerability
Published 2025-08-12 · Analyzed
5.3EPSS 0.009
CVE-2025-64667
Microsoft Exchange Server Spoofing Vulnerability
Published 2025-12-09 · Analyzed
5.3EPSS 0.008
CVE-2026-45502
Microsoft Exchange Server Information Disclosure Vulnerability
Published 2026-06-09 · Analyzed
5.0EPSS 0.006
← Prev4 / 4