CVE Catalog
CVE-2026-62914
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk0.34%
26th percentile - higher than 26% of all known CVEs
Summary
Improper neutralization of input during web page generation (cross-site scripting) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
Risk Assessment
An attacker could impersonate trusted content, potentially leading to credential theft or spreading malicious links within the organization.
Recommendation
Apply security updates for Microsoft Exchange Server and consider additional content filtering mechanisms.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.