Microsoft Exchange Server 2019 Cumulative Update 14 vulnerabilities, page 3
49 vulnerabilities
Known vulnerabilities in Microsoft Exchange Server 2019 Cumulative Update 14, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-69380microsoftexchange_server+5
EPSS score0.69%
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.CVE-2026-69361microsoftexchange_server+5EPSS score0.84%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.CVE-2026-45500microsoftexchange_server+5EPSS score0.41%
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.CVE-2026-45504microsoftexchange_server+5EPSS score0.78%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.CVE-2026-45503microsoftexchange_server+5EPSS score0.86%
Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.CVE-2026-45501microsoftexchange_server+5EPSS score0.46%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.CVE-2026-45583microsoftexchange_server+5EPSS score0.70%
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.CVE-2026-45502microsoftexchange_server+5EPSS score0.64%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.CVE-2026-96940microsoftexchange_server+5EPSS score0.48%
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.