2934 matches found
CVE-2025-59248 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2025-59248
CVE-2025-59248 maps to a Microsoft Exchange Server spoofing vulnerability caused by improper input validation, enabling an unauthenticated attacker to leverage network spoofing. Connected sources (CNVD/EUVD and MSRC/MSKB entries) confirm this spoofing flaw and its association with Exchange Server...
CVE-2025-59249
CVE-2025-59249 is a Microsoft Exchange Server elevation-of-privilege vulnerability described as caused by weak authentication. The CVE is discussed across multiple sources (CNVD, EUVD, NCSC, MSRC and CVE listings) with details indicating that an attacker who is already authenticated can escalate ...
CVE-2025-59249 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-59249 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-53782
CVE-2025-53782 refers to an elevation-of-privilege vulnerability in Microsoft Exchange Server caused by an incorrect implementation of the authentication algorithm, enabling an unauthorized, local attacker to escalate privileges. Across connected sources, the vulnerability is associated with mult...
CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Description of the security update for Microsoft Exchange Server 2019 CU15: October 14, 2025 (KB5066367)
None None...
Description of the security update for Microsoft Exchange Server 2019 CU14: October 14, 2025 (KB5066368)
None None...
Description of the security update for Microsoft Exchange Server 2016 CU23: October 14, 2025 (KB5066369)
None None...
Microsoft Exchange Server Spoofing Vulnerability
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: October 14, 2025 (KB5066366)
None None...
PT-2025-42005
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An incorrect implementation of the authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally. An unauthenticated...
KLA89271 Multiple vulnerabilities in Microsoft Server Software
Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited...
PT-2025-42128
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper input validation in Microsoft Exchange Server can allow an unauthorized attacker to perform spoofing over a network. Recommendations At the moment, there is no...
Microsoft Exchange Server 输入验证错误漏洞
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...
PT-2025-42129
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An issue with weak authentication in Microsoft Exchange Server could allow an authorized attacker to elevate privileges on a network. Recommendations At the moment, there is...
Microsoft Exchange Server 安全漏洞
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...
Security Updates for Microsoft Exchange Server (October 2025)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the October, 2025 security bulletin. - Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate...