CVE-2025-58107

In Microsoft Exchange versions through 2019 (prior to 2020), a vulnerability exists in the Exchange ActiveSync (EAS) configuration on on-premises servers. This flaw allows sensitive data from Samsung mobile devices to be transmitted in cleartext . Exposed information may include the user's name, ...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the exchange/eas/EasAutoDiscover.java function in the implementation of the Autodiscover component of the Android operating system’s Exchange ActiveSync component is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious acto...

PT-2009-4163 · Microsoft +1 · Exchange Activesync +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The Profiles component, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weake...