Microsoft Exchange Server 2019 Cumulative Update 13

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

critical

by severity

0critical4high0medium0low

updated 2026-10-27

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21410US	—OT critical	12.7% (96th)	KEV	15.2.1544.004	2024-02-13	2 versions
CVE-2023-32031US	—	81.5% (100th)	Exploit	15.02.1258.016	2023-06-14	2 versions
CVE-2023-36745US	—	76.2% (100th)	Exploit	15.02.1258.025	2023-09-12	2 versions
CVE-2023-36035US	high8.0	86.6% (100th)	—	15.02.1258.028	2023-11-14	2 versions
CVE-2023-36039US	high8.0	73.0% (99th)	—	15.02.1258.028	2023-11-14	2 versions
CVE-2023-36744US	—	57.1% (99th)	—	15.02.1258.025	2023-09-12	2 versions
CVE-2023-36777US	—	52.0% (99th)	—	15.02.1258.025	2023-09-12	2 versions
CVE-2023-36756US	—	49.2% (99th)	—	15.02.1258.025	2023-09-12	2 versions
CVE-2023-36050US	high8.0	39.2% (99th)	—	15.02.1258.028	2023-11-14	2 versions
CVE-2023-36757US	—	36.9% (99th)	—	15.02.1258.025	2023-09-12	2 versions
CVE-2023-28310US	—	25.0% (98th)	—	15.02.1258.016	2023-06-14	2 versions
CVE-2023-38181US	—	10.8% (96th)	—	15.02.1258.025	2023-08-08	2 versions
CVE-2024-49040US	—	8.47% (95th)	—	15.02.1258.039	2024-11-12	2 versions
CVE-2023-35388US	—	6.85% (94th)	—	15.02.1258.025	2023-08-08	2 versions
CVE-2024-26198US	—	6.82% (94th)	—	15.02.1544.011	2024-03-12	2 versions
CVE-2023-38182US	—	5.92% (93rd)	—	15.02.1258.025	2023-08-08	2 versions
CVE-2023-36439US	high8.0	4.96% (92nd)	—	15.02.1258.028	2023-11-14	2 versions
CVE-2023-38185US	—	2.68% (86th)	—	15.02.1258.025	2023-08-08	2 versions
CVE-2023-35368US	—	2.49% (85th)	—	15.02.1258.025	2023-08-08	2 versions
CVE-2023-36778US	—	2.33% (83rd)	—	15.02.1258.027	2023-10-10	2 versions
CVE-2023-21709US	—	1.98% (80th)	—	15.02.1258.025	2023-08-08	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data14 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-287Improper Authentication4 CVEs
CWE-264CWE-2642 CVEs
CWE-426Untrusted Search Path2 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information2 CVEs
CWE-23Relative Path Traversal1 CVEs

sources (1)

Which sources assert this record, and when.

USMicrosoft MSRC (CSAF)21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan