← Database

CVE-2025-25006

MEDIUM CVSS: 5.3 Published: 2025-08-12 Modified: 2026-06-17

Description

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Affected Platforms

Microsoft Exchange ServerMicrosoft Exchange Server Subscription Edition

Weakness Type

CWE-167, NVD-CWE-Other

References