CVE-2026-45501
EUVD-2026-3567709.06.2026, 17:17
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | exchange_server | 𝑥 < 15.02.2562.043 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-918 - Server-Side Request Forgery (SSRF)The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.