Description
Microsoft Exchange Server Spoofing Vulnerability
CVSS breakdown
CVSS 3.1
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
E
Unchanged
RL
O
RC
Changed
Affected products
- Microsoft / Microsoft Exchange Server 2016 Cumulative Update 2315.01.0 – 15.01.2507.017
- Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1115.02.0 – 15.02.0986.037
- Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1215.02.0 – 15.02.1118.021