CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25005

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

CVE-2025-25007 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2025-25007

CVE-2025-25007 affects Microsoft Exchange Server. The issue arises from improper validation of input syntax, allowing an unauthenticated network attacker to spoof communications. The vulnerability is reported with CVSS v3.1 base score 5.3 (Medium) and is network-exploitable with no user interacti...

CVE-2025-25007 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2025-25006 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2025-25006

CVE-2025-25006 affects Microsoft Exchange Server. The connected MSKB/ advisories confirm a spoofing vulnerability arising from improper handling of an additional special element, exploitable over the network with no privileges or user interaction required. Microsoft released fixes: KB5063224 (Exc...

CVE-2025-25006 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2025-25005 Microsoft Exchange Server Tampering Vulnerability

...

CVE-2025-25005 Microsoft Exchange Server Tampering Vulnerability

...

CVE-2025-33051 Microsoft Exchange Server Information Disclosure Vulnerability

...

CVE-2025-33051

CVE-2025-33051 is an information-disclosure vulnerability in Microsoft Exchange Server. The issue stems from improper input validation and handling of certain elements, enabling an unauthenticated attacker to disclose sensitive data over the network. The CVSSv3.1 base score is 7.5 (HIGH) with net...

Over 29,000 Unpatched Microsoft Exchange Servers Leaving Networks at Risk

A vulnerability in Microsoft Exchange leaves over 29,000 servers vulnerable. Learn how this unpatched security hole could compromise…...

Microsoft Exchange Server Spoofing Vulnerability

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

Microsoft Exchange Server Tampering Vulnerability

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identifi...

Microsoft Exchange Server Spoofing Vulnerability

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

PT-2025-32741

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The software contains an issue with improper handling of additional special elements, potentially allowing an unauthorized attacker to perform spoofing over a network...

PT-2025-32758

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: An issue allows attackers to obtain sensitive information and affect the system. This exposure of sensitive information to an unauthorized actor allows an attacker to...

KLA86581 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft...