Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
Severity
High 7.5
Published
12 Aug 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
15.02.2562.020
Sources
NVD
Affected software
Software
Affected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
Version 2019-cumulative_update_13
Version 2019-cumulative_update_12
Version 2019-cumulative_update_11
Version 2019-cumulative_update_10
All 37 release lines
Version 2016
Version 2016-cumulative_update_1
Version 2016-cumulative_update_2
Version 2016-cumulative_update_3
Version 2016-cumulative_update_4
Version 2016-cumulative_update_5
Version 2016-cumulative_update_6
Version 2016-cumulative_update_7
Version 2016-cumulative_update_8
Version 2016-cumulative_update_9
Version 2016-cumulative_update_10
Version 2016-cumulative_update_11
Version 2016-cumulative_update_12
Version 2016-cumulative_update_13
Version 2016-cumulative_update_14
Version 2016-cumulative_update_15
Version 2016-cumulative_update_16
Version 2016-cumulative_update_17
Version 2016-cumulative_update_18
Version 2016-cumulative_update_19
Version 2016-cumulative_update_20
Version 2016-cumulative_update_21
Version 2016-cumulative_update_22
Version 2019
Version 2019-cumulative_update_1
Version 2019-cumulative_update_2
Version 2019-cumulative_update_3
Version 2019-cumulative_update_4
Version 2019-cumulative_update_5
Version 2019-cumulative_update_6
Version 2019-cumulative_update_7
Version 2019-cumulative_update_8
Version 2019-cumulative_update_9
Version 2019-cumulative_update_10
Version 2019-cumulative_update_11
Version 2019-cumulative_update_12
Version 2019-cumulative_update_13
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server_subscription_edition