CVE-2019-1137

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.

Affected products

• microsoft / Microsoft Exchange Server 2013Cumulative Update 23 – Cumulative Update 23
• microsoft / Microsoft Exchange Server 2016Cumulative Update 12 – Cumulative Update 12
• microsoft / Microsoft Exchange Server 2016Cumulative Update 13 – Cumulative Update 13
• microsoft / Microsoft Exchange Server 2019Cumulative Update 1 – Cumulative Update 1
• microsoft / Microsoft Exchange Server 2019Cumulative Update 2 – Cumulative Update 2

References

• VENDOR_ADVISORYhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1137