Spoofing Vulnerability in Microsoft Exchange Server by Microsoft
CVE-2025-59248
7.5HIGH
Key Information:
What is CVE-2025-59248?
An improper input validation issue in Microsoft Exchange Server can be exploited by malicious actors to conduct spoofing attacks over a network, potentially enabling unauthorized access and the impersonation of legitimate users.
Affected Version(s)
Microsoft Exchange Server 2016 Cumulative Update 23 x64-based Systems 15.01.0.0 < 15.01.2507.061
Microsoft Exchange Server 2019 Cumulative Update 14 x64-based Systems 15.02.0.0 < 15.02.1544.036
Microsoft Exchange Server 2019 Cumulative Update 15 x64-based Systems 15.02.0.0 < 15.02.1748.039
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved