← CVE Intelligence

CVE-2019-1137

Microsoft / Microsoft Exchange Server 2016 PUBLISHED

Description (CNA)

A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.

Affected (CNA)

Vendor / productVersions
Microsoft / Microsoft Exchange Server 2016affected Cumulative Update 12; affected Cumulative Update 13
Microsoft / Microsoft Exchange Server 2019affected Cumulative Update 1; affected Cumulative Update 2
Microsoft / Microsoft Exchange Server 2013affected Cumulative Update 23

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.