Known vulnerabilities in Microsoft Exchange Server 2019 CU15 Jul26SU 15.02.1748.048

Vendor: Microsoft
Version: 2019 CU15 Jul26SU 15.02.1748.048
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Exchange Server version 2019 CU15 Jul26SU 15.02.1748.048 Microsoft Exchange Server 2019 CU15 Jul26SU 15.02.1748.048 is affected by 9 vulnerabilities: 4 medium, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147644 - Missing Authorization
CVE-2026-69380
CWE-862 Medium
No
No
SE RTM Sep26SU 15.02.2562.049, 2016 CU23 Sep26SU 15.01.2507.073, 2019 CU14 Sep26SU 15.02.1544.046, 2019 CU15 Sep26SU 15.02.1748.051 08.09.2026 SB2026090908
#VU147622 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69356
CWE-79 Medium
No
No
SE RTM Sep26SU 15.02.2562.049, 2016 CU23 Sep26SU 15.01.2507.073, 2019 CU14 Sep26SU 15.02.1544.046, 2019 CU15 Sep26SU 15.02.1748.051 08.09.2026 SB2026090908
#VU141972 - Authentication Bypass by Capture-replay
CVE-2026-62911
CWE-294 Medium
Public exploit available
No
SE RTM Aug26SU 15.02.2562.046, 2016 CU23 Aug26SU 15.01.2507.072, 2019 CU14 Aug26SU 15.02.1544.044, 2019 CU15 Aug26SU 15.02.1748.049 12.08.2026 SB2026081147
#VU141479 - Server-Side Request Forgery (SSRF)
CVE-2026-65813
CWE-918 Low
No
No
SE RTM Aug26SU 15.02.2562.046, 2016 CU23 Aug26SU 15.01.2507.072, 2019 CU14 Aug26SU 15.02.1544.044, 2019 CU15 Aug26SU 15.02.1748.049 11.08.2026 SB2026081147
#VU141478 - Missing Authorization
CVE-2026-62915
CWE-862 Low
No
No
SE RTM Aug26SU 15.02.2562.046, 2016 CU23 Aug26SU 15.01.2507.072, 2019 CU14 Aug26SU 15.02.1544.044, 2019 CU15 Aug26SU 15.02.1748.049 11.08.2026 SB2026081147
#VU141476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-62914
CWE-79 Low
No
No
SE RTM Aug26SU 15.02.2562.046, 2016 CU23 Aug26SU 15.01.2507.072, 2019 CU14 Aug26SU 15.02.1544.044, 2019 CU15 Aug26SU 15.02.1748.049 11.08.2026 SB2026081147
#VU141475 - Heap-based Buffer Overflow
CVE-2026-62913
CWE-122 Medium
No
No
SE RTM Aug26SU 15.02.2562.046, 2016 CU23 Aug26SU 15.01.2507.072, 2019 CU14 Aug26SU 15.02.1544.044, 2019 CU15 Aug26SU 15.02.1748.049 11.08.2026 SB2026081147
#VU141474 - Deserialization of Untrusted Data
CVE-2026-62912
CWE-502 Low
No
No
SE RTM Aug26SU 15.02.2562.046, 2016 CU23 Aug26SU 15.01.2507.072, 2019 CU14 Aug26SU 15.02.1544.044, 2019 CU15 Aug26SU 15.02.1748.049 11.08.2026 SB2026081147
#VU141473 - Improper Control of Resource Identifiers ('Resource Injection')
CVE-2026-62910
CWE-99 Low
No
No
SE RTM Aug26SU 15.02.2562.046, 2016 CU23 Aug26SU 15.01.2507.072, 2019 CU14 Aug26SU 15.02.1544.044, 2019 CU15 Aug26SU 15.02.1748.049 11.08.2026 SB2026081147