User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Severity
Medium 5.3
Published
9 Dec 2025
Last changed
14 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
15.02.2562.035
Sources
NVD
Affected software
Software
Affected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
Version 2019-cumulative_update_13
Version 2019-cumulative_update_12
Version 2019-cumulative_update_11
Version 2019-cumulative_update_10
All 37 release lines
Version 2016
Version 2016-cumulative_update_1
Version 2016-cumulative_update_2
Version 2016-cumulative_update_3
Version 2016-cumulative_update_4
Version 2016-cumulative_update_5
Version 2016-cumulative_update_6
Version 2016-cumulative_update_7
Version 2016-cumulative_update_8
Version 2016-cumulative_update_9
Version 2016-cumulative_update_10
Version 2016-cumulative_update_11
Version 2016-cumulative_update_12
Version 2016-cumulative_update_13
Version 2016-cumulative_update_14
Version 2016-cumulative_update_15
Version 2016-cumulative_update_16
Version 2016-cumulative_update_17
Version 2016-cumulative_update_18
Version 2016-cumulative_update_19
Version 2016-cumulative_update_20
Version 2016-cumulative_update_21
Version 2016-cumulative_update_22
Version 2019
Version 2019-cumulative_update_1
Version 2019-cumulative_update_2
Version 2019-cumulative_update_3
Version 2019-cumulative_update_4
Version 2019-cumulative_update_5
Version 2019-cumulative_update_6
Version 2019-cumulative_update_7
Version 2019-cumulative_update_8
Version 2019-cumulative_update_9
Version 2019-cumulative_update_10
Version 2019-cumulative_update_11
Version 2019-cumulative_update_12
Version 2019-cumulative_update_13
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server_subscription_edition