Sign in

7.5 High

CVE-2024-49040 Microsoft Exchange Server Spoofing Vulnerability

Description

Microsoft Exchange Server Spoofing Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Exchange Server 2019 Cumulative Update 13 15.02	15.02.0 → < 15.02.1258.039	15.02.1258.039
Microsoft Exchange Server 2019 Cumulative Update 14 15.02	15.02.0 → < 15.02.1544.014	15.02.1544.014
Microsoft Exchange Server 2016 Cumulative Update 23 15.01	15.01.0 → < 15.01.2507.044	15.01.2507.044

The 21 CVEs of Microsoft Exchange Server 2019 Cumulative Update 13 →

CVE-2024-26198 Microsoft Exchange Server Remote Code Execution Vulnerability 8.8 High CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability 9.8 Critical CVE-2023-36035 Microsoft Exchange Server Spoofing Vulnerability 8.0 High CVE-2023-36050 Microsoft Exchange Server Spoofing Vulnerability 8.0 High

Do you use Microsoft Exchange Server 2019 Cumulative Update 13?

Track this CVE Watch Microsoft Exchange Server 2019 Cumulative Update 13 Check my SBOMs

cveye.io/en/cve/CVE-2024-49040

Timeline

Published November 12, 2024
Last modified July 8, 2025

References

Microsoft Exchange Server Spoofing Vulnerability msrc.microsoft.com

Track this CVE