CVE-2026-45501

MEDIUM WAF: High
CVSS 6.1 Published: 2026-06-09
CWE-918 CWE-79

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

WAF Coverage Analysis

Server-Side Request Forgery (SSRF) Medium WAF Coverage

OWASP: A10:2021 SSRF

934xxx - Node.js / Generic Injection
Cross-Site Scripting (XSS) High WAF Coverage

OWASP: A03:2021 Injection

941xxx - XSS / XXE

Affected Software

VendorProductVersion
microsoftexchange_server2016
microsoftexchange_server2019
microsoftexchange_server2019
microsoftexchange_server_subscription_editionup to 15.02.2562.043

References

Back to CVE Database