CVE-2019-0724: microsoft exchange_server
Vulnerability summary
CVE-2019-0724 is a high (CVSS 9.3) vulnerability in microsoft exchange_server. EPSS estimates a 23.80% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 06-03-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0686.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
23.80%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 23.80% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Exchange Privilege Escalation Exploit
auxiliary/scanner/http/exchange_web_server_pushsubscription
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft5 products
- exchange_server2010:sp3_rollup_26 | 2013:cumulative_update_22 | 2016:cumulative_update_12 | 2019:cumulative_update_1
- microsoft exchange server 2010Service Pack 3 Update Rollup 26
- microsoft exchange server 2013Cumulative Update 22
- microsoft exchange server 2016Cumulative Update 12
- microsoft exchange server 2019Cumulative Update 1
1 vendor · 5 products
References
2 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0724X Refsource CONFIRMPatchVendor Advisory