Read the docs
Microsoft update

KB5063222

Security Update

View on Microsoft →

Fixed in

Fixes 4 records

Priority MEDIUM 42

Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01385 Published 2025-08-12 Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-200
Priority LOW 32

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00903 Published 2025-08-12 Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-1286
Priority LOW 32

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00922 Published 2025-08-12 Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-167
Priority LOW 32

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01452 Published 2025-08-12 Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-20