Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-25006


Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.


Published

2025-08-12T18:15:27.830

Last Modified

2025-09-03T14:51:39.180

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-167
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft exchange_server < 15.02.2562.020 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2016 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes
Application microsoft exchange_server 2019 Yes

References