← back
CVE-2019-1373

CVE-2019-1373

EPSS 18.2%
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 18.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Nov 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
Affected products
Microsoft · Microsoft Exchange Server 2013Microsoft · Microsoft Exchange Server 2016Microsoft · Microsoft Exchange Server 2016 Cumulative Update 14Microsoft · Microsoft Exchange Server 2019Microsoft · Microsoft Exchange Server 2019 Cumulative Update 3
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1373