CVE-2025-59248

Опубликовано: 14 окт. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Ссылки

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59248
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:exchange_server:*:*:*:*:subscription:*:*:*

Версия до 15.02.2562.029 (исключая)

cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_2:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_3:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_4:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_13:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00212

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20

NVD-CWE-noinfo

Связанные уязвимости

CVE-2025-59248

CVSS3: 7.5

msrc

21 день назад

Microsoft Exchange Server Spoofing Vulnerability

GHSA-4fp2-p8gm-qx95

CVSS3: 7.5

github

21 день назад

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

BDU:2025-13008

CVSS3: 7.5

fstec

22 дня назад

Уязвимость почтового сервера Microsoft Exchange Server, связанная с недостаточной проверкой входных данных, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 44%

0.00212

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20

NVD-CWE-noinfo