Fixes 4 records
Priority MEDIUM 42
Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01385 · Published 2025-08-12 · Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-200
Priority LOW 32
Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00903 · Published 2025-08-12 · Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-1286
Priority LOW 32
Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00922 · Published 2025-08-12 · Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-167
Priority LOW 32
Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01452 · Published 2025-08-12 · Fixed in 15.01.2507.058, 15.02.1544.033 +2 CWE-20