Search: CVE-2026-42897

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	KEVEPSS 70%	CVE-2026-42897Microsoft Exchange Server 2016 Cumulative Update 23 · Cross-site Scripting High8.1KEVEPSS 70%2026-05-14CVE Database V5CVE-2026-42897 CVE-2026-42897 is a high-severity cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 23. It involves improper neutralization of input during web page generation, allowing unauthorized attackers to perform spoofing attacks over a network. The vulnerability has a CVSS score of 8.1 and is known to be exploited in the wild. An official fix is available from Microsoft. KEVEPSS 70%Vulnerability CWE-79	CVE Database V5	2026-05-14

Page 1 of 1