DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Exchange Server und Microsoft Exchange: Mehrere Schwachstellen
view advisory published 2025-08-12
Ein Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server und Microsoft Exchange ausnutzen, um seine Privilegien zu erhöhen, um Daten zu Manipulieren, und um Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-33051US | — | — | ||
Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2025-25007US | — | — | ||
Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2025-25006US | — | — | ||
Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2025-25005US | medium6.5 | — | ||
Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. | ||||
| CVE-2025-53786US | — | Exploit | ||
On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general i… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan