8.8

CVE-2025-59249

Microsoft Exchange Server Elevation of Privilege Vulnerability

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server Version 2016 Update -
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_1
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_10
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_11
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_12
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_13
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_14
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_15
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_16
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_17
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_18
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_19
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_2
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_20
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_21
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_22
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_3
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_4
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_5
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_6
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_7
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_8
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_9
Microsoft ≫ Exchange Server Version 2019 Update -
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_1
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_10
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_11
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_12
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_13
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_2
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_3
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_4
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_5
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_6
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_7
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_8
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_9
Microsoft ≫ Exchange Server Subscription Edition Version < 15.02.2562.029
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.77% 0.516
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-1390 Weak Authentication

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59249
Vendor Advisory