Exchange UI Spoofing Vulnerability

Microsoft Exchange Server allows an attacker to perform spoofing over a network by misrepresenting critical information in the user interface. This vulnerability poses a significant risk to organizations using Microsoft Exchange Server, as it can be exploited remotely without requiring any user interaction or privileges.

You're affected if you use User. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

To fix this vulnerability, follow these steps:

1. Apply the security update (KB5003225) released by Microsoft: https://support.microsoft.com/en-us/topic/exchange-server-2016-sp1-and-exchange-server-2019-update-kb5003225-2c8d0f36-7e3a-4a71-bf30-9f6d9f1c8da5
2. If you can't apply the update immediately, consider implementing a network segmentation strategy to isolate your Exchange Server instance from the public internet.

• msrc.microsoft.com