【Vulnerability Alert】A critical security vulnerability (CVE-2025-59249) has been identified in Microsoft Exchange Server.

publish date : 2025-10-23 update date : 2025-10-23

Source: Ministry of education information & communication security contingency platform

"" "" ""


Publication Number	TACERT-ANA-2025101704104545	Publication Time	2025/10/17 16:56
Incident Type	ANA-Vulnerability Alert	Discovery Time	2025/10/17 16:56
Impact Level	Low
[Subject] 【Vulnerability Alert】A critical security vulnerability (CVE-2025-59249) has been identified in Microsoft Exchange Server.
[Content] Forwarded from TWCERTCC-200-202510-00000009 Microsoft has released a security advisory for a critical vulnerability (CVE-2025-59249, CVSS: 8.8) affecting Exchange Server. This is a weak authentication vulnerability that allows an authenticated attacker to elevate privileges over the network. Information Sharing Level: WHITE (Information content can be publicly disclosed)
[Affected Platform] ● Microsoft Exchange Server Subion Edition RTM ● Microsoft Exchange Server 2019 Cumulative Update 15 ● Microsoft Exchange Server 2019 Cumulative Update 14 ● Microsoft Exchange Server 2016 Cumulative Update 23
[Recommended Actions] Please follow the remediation steps provided on the official Microsoft website to apply the necessary security updates: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59249
[Reference] https://www.twcert.org.tw/tw/cp-169-10447-4a433-1.html

(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw

Organizer: Computer Center

Click Num:

Share