CVE-2025-25006

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-167

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 23	>= 15.01.0.0, < 15.01.2507.058
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 14	>= 15.02.0.0, < 15.02.1544.033
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 15	>= 15.02.0.0, < 15.02.1748.036
Microsoft	Microsoft Exchange Server Subscription Edition RTM	>= 15.02.0.0, < 15.02.2562.020

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25006Vendor Advisory

Timeline

Published: Aug 12, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-250075.3Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over CVE-2025-250087.1Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges loca CVE-2025-250095.4Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.CVE-2025-25017.8An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.CVE-2025-250106.5Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability to CVE-2025-250117.0An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulne CVE-2025-250125.4URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request for CVE-2025-250136.5Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens vi CVE-2025-250149.8A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting CVE-2025-250159.9Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana CVE-2025-250164.3Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file d CVE-2025-250176.1Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS)