Microsoft Exchange Server Spoofing Vulnerability via Server-Side Request Forgery

A server-side request forgery (SSRF) vulnerability has been identified in Microsoft Exchange Server. This vulnerability allows an authorized attacker to perform network spoofing. It affects multiple versions of Microsoft Exchange Server, including the 2019 Cumulative Updates 14 and 15, the 2016 Cumulative Update 23, and the Subscription Edition RTM.

Impact

Exploitation of this vulnerability could lead to unauthorized network spoofing.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Instructions for downloading the security update are available on the Microsoft Exchange Server Security Update Guide page.