Orta CVSS 6.1 CISA KEV
CVE-2026-42897: Microsoft Exchange Server XSS Açığı
Exchange Server'da güvenilmeyen veri girişi nedeniyle saldırganlar sahtecilik yapabilir. Bu açığı kapatmak için Microsoft'un güvenlik güncellemelerini derhal uygulayın.
Türkçe özet yapay zekâ ile üretildi.
Açıklama (NVD)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Özet bilgiler
- Ürün
- Microsoft Exchange Server
- CVSS v3.1
- 6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS
- %70,66 (yüzdelik 99)
- CWE
- CWE-79
- Yama
- Geçici çözüm
- KEV
- Eklenme: 2026-05-15 · Son tarih: 2026-05-29
Gerekli aksiyon: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2016 | 2016 | — |
| microsoft-exchange-server | 2019 | 2019 | — |
| microsoft-exchange-server | 2019 | 2019 | — |
| microsoft-exchange-server | 2019 | 2019 | — |
| microsoft-exchange-server | 2019 | 2019 | — |
| microsoft-exchange-server | 2019 | 2019 | — |
| microsoft-exchange-server | 2019 | 2019 | — |