Description
Microsoft Exchange Server Spoofing Vulnerability
CVSS breakdown
CVSS 3.1
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
E
Unchanged
RL
O
RC
Changed
Affected products
- Microsoft / Microsoft Exchange Server 2013 Cumulative Update 2315.00.0 – 15.00.1497.044
- Microsoft / Microsoft Exchange Server 2016 Cumulative Update 2215.0.0 – 15.01.2375.037
- Microsoft / Microsoft Exchange Server 2016 Cumulative Update 2315.01.0 – 15.01.2507.016
- Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1115.02.0 – 15.02.0986.036
- Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1215.02.0 – 15.02.1118.020