CVE-1999-0993: Microsoft Exchange Server

High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days.

Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.

Affected products

• Microsoft Exchange Server: version 5.0 only; version 5.5 only

Published 1999-12-13. Last modified 2026-06-16.