Microsoft Exchange Server Spoofing Vulnerability

CVE-2024-49040
7.5HIGH

Key Information

Vendor
Microsoft
Status
Microsoft Exchange Server 2019 Cumulative Update 13
Microsoft Exchange Server 2019 Cumulative Update 14
Microsoft Exchange Server 2016 Cumulative Update 23
Vendor
CVE Published:
12 November 2024

Badges

đź“° News Worthy

Summary

Microsoft Exchange Server Spoofing Vulnerability

Affected Version(s)

Microsoft Exchange Server 2019 Cumulative Update 13 < 15.02.1258.038

Microsoft Exchange Server 2019 Cumulative Update 14 < 15.02.1544.013

Microsoft Exchange Server 2016 Cumulative Update 23 < 15.01.2507.043

News Articles

favicon imageBleepingComputer

Microsoft Exchange adds warning to emails abusing spoofing flaw

Microsoft has disclosed a high-severity Exchange Server vulnerability that allows attackers to forge legitimate senders on incoming emails and make malicious messages a lot more effective.

2 weeks ago

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • First article discovered by BleepingComputer

  • Vulnerability published.

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed1 News Article(s)
.