Priority MEDIUM 42
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00845 · Published 2025-10-14 · Fixed in 15.01.2507.061, 15.02.1544.036 +2 CWE-1390
Priority MEDIUM 41
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01019 · Published 2025-10-14 · Fixed in 15.01.2507.061, 15.02.1544.036 +2 CWE-20
Priority LOW 38
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00365 · Published 2025-10-14 · Fixed in 15.01.2507.061, 15.02.1544.036 +2 CWE-303
