CyberSec.Space Logo
Back to CVE Browser

CVE-2026-42897

Known Exploited (CISA KEV)HIGH
7.4
CVSS Severity Score
EPSS Score96.3160%
EPSS Percentile87.60th
PublishedMay 15, 2026
Last ModifiedJun 12, 2026

Vulnerability Description

Microsoft Microsoft is vulnerable to Microsoft Exchange Server Cross-Site Scripting Vulnerability. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Affected Platforms (CPE)

📦
Microsoft

Microsoft

Refer to description

Related Vulnerabilities

CVE-2021-4231110.0

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVE-2021-4231310.0

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVE-2020-079610.0

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles cer...

CVE-1999-036410.0

Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.