{
  "cveId": "CVE-2019-1373",
  "url": "https://patchblox.com/security/cve/CVE-2019-1373",
  "summary": "CVE-2019-1373 is fixed in 5 products on 1 platform, first by KB4523171, released November 12, 2019. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "Microsoft Exchange Remote Code Execution Vulnerability",
  "description": "\u003Cp\u003EA remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the logged in user.\u003C/p\u003E\n\u003Cp\u003EExploitation of this vulnerability requires that a user run cmdlets via PowerShell.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how Exchange serializes its metadata.\u003C/p\u003E",
  "published": "2019-11-12T08:00:00Z",
  "severity": "Critical",
  "epss": 0.21676,
  "epssPercentile": 0.97647,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1373",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
      "fixedVersion": "",
      "fix": "KB4523171",
      "url": "https://patchblox.com/security/fix/microsoft/kb4523171",
      "released": "2019-11-12T08:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
      "fixedVersion": "",
      "fix": "KB4523171",
      "url": "https://patchblox.com/security/fix/microsoft/kb4523171",
      "released": "2019-11-12T08:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
      "fixedVersion": "",
      "fix": "KB4523171",
      "url": "https://patchblox.com/security/fix/microsoft/kb4523171",
      "released": "2019-11-12T08:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
      "fixedVersion": "",
      "fix": "KB4523171",
      "url": "https://patchblox.com/security/fix/microsoft/kb4523171",
      "released": "2019-11-12T08:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
      "fixedVersion": "",
      "fix": "KB4523171",
      "url": "https://patchblox.com/security/fix/microsoft/kb4523171",
      "released": "2019-11-12T08:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}