VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,608 vulnerabilities · 1,766 actively exploited (CISA KEV)

exchange server ✕Clear filters

257 results

ID	Severity	Summary	Published
CVE-2025-25006	中危5.3	Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.	12/08/2025
CVE-2025-25005	中危6.5	Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.	12/08/2025
CVE-2025-53786	高危8.0	On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security im	06/08/2025