Priority LOW 37
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0102 · Published 2025-12-09 · Fixed in 15.01.2507.063, 15.02.1544.037 +2 CWE-20
Priority LOW 31
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00796 · Published 2025-12-09 · Fixed in 15.01.2507.063, 15.02.1544.037 +2 CWE-451
