Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:microsoft_exchange_server_subscription_edition_rtm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductMicrosoft Exchange Server Subscription Edition Rtm (579a654f-5693-5e02-9931-c83bc6e85d6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42897 vulnerable 2026-06-08 08:03:16.899081 Microsoft Exchange Server Spoofing Vulnerability
HIGH (8.1)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-05-14T17:00:36.515Z
Updated: 2026-06-19T16:12:39.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21527 vulnerable 2026-06-08 07:49:16.533260 Microsoft Exchange Server Spoofing Vulnerability
MEDIUM (6.5)
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-02-10T17:51:30.280Z
Updated: 2026-05-11T21:25:31.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64667 vulnerable 2026-06-08 07:39:20.085148 Microsoft Exchange Server Spoofing Vulnerability
MEDIUM (5.3)
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-12-09T17:55:44.488Z
Updated: 2026-04-16T14:18:39.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64666 vulnerable 2026-06-08 07:39:20.044232 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-12-09T17:55:45.263Z
Updated: 2026-04-16T14:18:39.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59249 vulnerable 2026-06-08 07:35:21.381364 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (8.8)
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-10-14T17:00:42.051Z
Updated: 2026-02-26T17:47:16.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59248 vulnerable 2026-06-08 07:35:21.341184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53786 vulnerable 2026-06-08 07:31:15.454519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53782 vulnerable 2026-06-08 07:31:15.397622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33051 vulnerable 2026-06-08 07:19:01.454674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25007 vulnerable 2026-06-08 07:12:50.460400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25006 vulnerable 2026-06-08 07:12:50.457310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25005 vulnerable 2026-06-08 07:12:50.416936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.