← Database

CVE-2025-25007

MEDIUM CVSS: 5.3 Published: 2025-08-12 Modified: 2026-06-17

Description

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Affected Platforms

Microsoft Exchange ServerMicrosoft Exchange Server Subscription Edition

Weakness Type

CWE-1286

References