CVE-2026-69356

9.3 Critique

Publiée le 08/09/2026 à 20:18 · Modifiée le 30/09/2026 à 14:29 · Analysée par le NVD · Source : secure@microsoft.com

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Traduire en français

Produits concernés

Microsoft Exchange Server 2016 Cumulative Update 23
Microsoft Exchange Server 2019 Cumulative Update 14
Microsoft Exchange Server 2019 Cumulative Update 15
Microsoft Exchange Server Subscription Edition RTM
Microsoft exchange server
Microsoft exchange server subscription edition

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.3 Critique	secure@microsoft.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-79

Références

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69356 PatchVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories