CVE-2026-45504

HIGH WAF: Medium
CVSS 8.8 Published: 2026-06-09
CWE-918

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

WAF Coverage Analysis

Server-Side Request Forgery (SSRF) Medium WAF Coverage

OWASP: A10:2021 SSRF

934xxx - Node.js / Generic Injection

Affected Software

VendorProductVersion
microsoftexchange_serverup to 15.02.2562.043
microsoftexchange_server2016
microsoftexchange_server2019
microsoftexchange_server2019

References

Back to CVE Database