Microsoft Exchange Server vulnerabilities

A cross-site scripting (XSS) vulnerability in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

A flaw in the user interface of Microsoft Exchange Server leads to misrepresentation of critical information, allowing an unauthorized attacker to perform spoofing over a network.

On April 18th, 2025, Microsoft announced security changes for Exchange Server in hybrid deployments and accompanying hot fixes. Further investigation revealed specific security implications related to these changes.

A vulnerability in Microsoft Exchange Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

A vulnerability in Microsoft Exchange Server allows attackers to spoof other email addresses. Exploiting this flaw could lead to email communication fraud.

A vulnerability in Microsoft Exchange Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

Elevation of privilege vulnerability in Microsoft Exchange Server. It allows an attacker to elevate their privileges in the system.

Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code in the context of the Exchange server.

Spoofing vulnerability in Microsoft Exchange Server. An attacker can impersonate another entity, potentially leading to fraud or unauthorized actions.

Spoofing vulnerability in Microsoft Exchange Server. An attacker can impersonate another entity, potentially leading to fraud or unauthorized actions.

Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute code remotely on the server.

Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code on the server.

Remote code execution vulnerability in Microsoft Exchange Server. An attacker can exploit this flaw to execute arbitrary code on the server.

Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code on the server.

Server-side request forgery (SSRF) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

A missing authorization vulnerability in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.

Improper neutralization of input during web page generation (cross-site scripting) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows an authorized attacker to deny service over a network.

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Improper control of resource identifiers (resource injection) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

A heap-based buffer overflow vulnerability in Microsoft Exchange Server allows an authorized attacker to execute code remotely over a network.

A cross-site scripting (XSS) vulnerability in Microsoft Exchange Server due to improper input neutralization during web page generation. Allows an unauthorized attacker to perform spoofing over a network.

Code injection vulnerability in Microsoft Exchange Server. An unauthorized attacker can remotely execute code over the network.

Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server. An authorized attacker can elevate privileges over a network.

Improper authorization vulnerability in Microsoft Exchange Server. An authorized attacker can exploit this vulnerability to disclose information over a network.

Server-side request forgery (SSRF) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server. An unauthorized attacker can perform spoofing over a network.

A flaw in the user interface of Microsoft Exchange Server leads to misrepresentation of critical information, allowing an unauthorized attacker to perform spoofing over a network.

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

Microsoft Exchange Server has a vulnerability that allows an unauthorized attacker to disclose sensitive information over a network.

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.