CVE-2025-58107

CVE-2025-58107 affects on-premises Microsoft Exchange environments up to 2019, specifically Exchange ActiveSync (EAS) configurations. The issue is that EAS configs may transmit sensitive data from Samsung mobile devices in cleartext, including the user’s name, email address, device ID, bearer tok...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the exchange/eas/EasAutoDiscover.java function in the implementation of the Autodiscover component of the Android operating system’s Exchange ActiveSync component is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious acto...

PT-2009-4163 · Microsoft +1 · Exchange Activesync +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The Profiles component, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weake...