Weak Authentication Vulnerability in Microsoft Exchange Server by Microsoft
CVE-2025-59249
Key Information:
What is CVE-2025-59249?
A weak authentication vulnerability exists in Microsoft Exchange Server, which may be exploited by an authorized attacker to elevate privileges within a network. This flaw underscores the importance of robust authentication measures to safeguard sensitive systems from potential intruders. Organizations using affected versions of Microsoft Exchange should prioritize applying security updates to mitigate risks associated with this vulnerability.
Affected Version(s)
Microsoft Exchange Server 2016 Cumulative Update 23 x64-based Systems 15.01.0.0 < 15.01.2507.061
Microsoft Exchange Server 2019 Cumulative Update 14 x64-based Systems 15.02.0.0 < 15.02.1544.036
Microsoft Exchange Server 2019 Cumulative Update 15 x64-based Systems 15.02.0.0 < 15.02.1748.039