Spoofing Vulnerability in Microsoft Exchange Server by Microsoft
CVE-2025-64667
5.3MEDIUM
Key Information:
What is CVE-2025-64667?
A user interface misrepresentation vulnerability in Microsoft Exchange Server permits an unauthorized attacker to deceive users, enabling malicious spoofing activities across the network. This flaw can compromise the integrity of system communications and allow attackers to impersonate legitimate users or services, potentially leading to unauthorized data access or manipulation.
Affected Version(s)
Microsoft Exchange Server 2016 Cumulative Update 23 x64-based Systems 15.01.0.0 < 15.01.2507.063
Microsoft Exchange Server 2019 Cumulative Update 14 x64-based Systems 15.02.0.0 < 15.02.1544.037
Microsoft Exchange Server 2019 Cumulative Update 15 x64-based Systems 15.02.0.0 < 15.02.1748.042