CVE:CVE-2019-1137
CNNVD:CNNVD-201907-456
Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。
Microsoft Exchange Server中存在跨站脚本漏洞，该漏洞源于程序没有正确过滤发送到受影响Exchange服务器上的Web请求。远程攻击者可借助特制的请求利用该漏洞在当前用户的安全上下文中执行脚本。以下产品及版本受到影响：Microsoft Exchange Server 2013 Cumulative Update 23，Exchange Server 2016 Cumulative Update 12，Exchange Server 2016 Cumulative Update 13，Exchange Server 2019 Cumulative Update 1，Exchange Server 2019 Cumulative Update 2。
solution:Upgrade microsoft exchange_server to a higher version than 2013,2013:cumulative_update_1,2013:cumulative_update_10,2013:cumulative_update_11,2013:cumulative_update_12,2013:cumulative_update_13,2013:cumulative_update_14,2013:cumulative_update_15,2013:cumulative_update_16,2013:cumulative_update_17,2013:cumulative_update_18,2013:cumulative_update_19,2013:cumulative_update_2,2013:cumulative_update_20,2013:cumulative_update_21,2013:cumulative_update_22,2013:cumulative_update_23,2013:cumulative_update_3,2013:cumulative_update_5,2013:cumulative_update_6,2013:cumulative_update_7,2013:cumulative_update_8,2013:cumulative_update_9,2013:sp1,2016,2016:cumulative_update_1,2016:cumulative_update_10,2016:cumulative_update_11,2016:cumulative_update_12,2016:cumulative_update_13,2016:cumulative_update_2,2016:cumulative_update_3,2016:cumulative_update_4,2016:cumulative_update_5,2016:cumulative_update_6,2016:cumulative_update_7,2016:cumulative_update_8,2016:cumulative_update_9,2019,2019:cumulative_update_1,2019:cumulative_update_2,and avoid the version 2013,2013:cumulative_update_1,2013:cumulative_update_10,2013:cumulative_update_11,2013:cumulative_update_12,2013:cumulative_update_13,2013:cumulative_update_14,2013:cumulative_update_15,2013:cumulative_update_16,2013:cumulative_update_17,2013:cumulative_update_18,2013:cumulative_update_19,2013:cumulative_update_2,2013:cumulative_update_20,2013:cumulative_update_21,2013:cumulative_update_22,2013:cumulative_update_23,2013:cumulative_update_3,2013:cumulative_update_5,2013:cumulative_update_6,2013:cumulative_update_7,2013:cumulative_update_8,2013:cumulative_update_9,2013:sp1,2016,2016:cumulative_update_1,2016:cumulative_update_10,2016:cumulative_update_11,2016:cumulative_update_12,2016:cumulative_update_13,2016:cumulative_update_2,2016:cumulative_update_3,2016:cumulative_update_4,2016:cumulative_update_5,2016:cumulative_update_6,2016:cumulative_update_7,2016:cumulative_update_8,2016:cumulative_update_9,2019,2019:cumulative_update_1,2019:cumulative_update_2