5.3
Moyenne
CVE-2025-25007 Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to…
Description
Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Exchange Server Subscription Edition RTM 15.02 | 15.02.0.0 → < 15.02.2562.020 | 15.02.2562.020 |
| Microsoft Exchange Server 2016 Cumulative Update 23 15.01 | 15.01.0.0 → < 15.01.2507.058 | 15.01.2507.058 |
| Microsoft Exchange Server 2019 Cumulative Update 14 15.02 | 15.02.0.0 → < 15.02.1544.033 | 15.02.1544.033 |
| Microsoft Exchange Server 2019 Cumulative Update 15 15.02 | 15.02.0.0 → < 15.02.1748.036 | 15.02.1748.036 |
Autres CVE de Microsoft Exchange Server Subscription Edition RTM
Les 46 CVE de Microsoft Exchange Server Subscription Edition RTM →
CVE-2026-87695
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to…
7.8
Élevée
CVE-2026-87692
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges…
7.8
Élevée
CVE-2026-77910
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network
8.8
Élevée
CVE-2026-87696
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate…
7.5
Élevée