Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server und Microsoft Exchange ausnutzen, um seine Privilegien zu erhöhen, um Daten zu Manipulieren, und um Informationen offenzulegen.
Product
Microsoft Exchange Server ist das Serverprodukt für das Client-Server Groupware- und Nachrichtensystem der Firma Microsoft.
Exchange ist ein Groupware und Nachrichtensystem der Firma Microsoft.
Vulnerabilities 5
-
High 8.0CVE-2025-53786 Public exploit
Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability
On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following fur…
-
High 7.5
Microsoft Exchange Server Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Exchange Server Tampering Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
-
Medium 5.3
Microsoft Exchange Server Spoofing Vulnerability
Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
-
Medium 5.3
Microsoft Exchange Server Spoofing Vulnerability
Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/