CVE Catalog

CVE-2023-38181

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
16.81%

97th percentile - higher than 97% of all known CVEs

Summary

A vulnerability in Microsoft Exchange Server allows attackers to spoof other email addresses. Exploiting this flaw could lead to email communication fraud.

Risk Assessment

Organizations may be exposed to phishing attacks and loss of trust from customers and partners. This could result in serious financial and reputational consequences.

Recommendation

It is recommended to update Microsoft Exchange Server to the latest version to patch this vulnerability. Additionally, implementing extra security measures such as email filtering is advisable.

Original NVD description (English source)

Microsoft Exchange Server Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS