6.5

CVE-2025-25005

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server SwEditionsubscription Version < 15.02.2562.020
Microsoft ≫ Exchange Server Version2016 Update-
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_1
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_10
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_11
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_12
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_13
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_14
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_15
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_16
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_17
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_18
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_19
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_2
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_20
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_21
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_22
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_3
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_4
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_5
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_6
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_7
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_8
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_9
Microsoft ≫ Exchange Server Version2019 Update-
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_1
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_10
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_11
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_12
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_13
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_2
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_3
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_4
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_5
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_6
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_7
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_8
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.21% 0.43
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
secure@microsoft.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.