CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2026-47631

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 32.0%

CVSS Severity

CVSS v3 Score 8.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47631

Products affected by CVE-2026-47631

Microsoft » Exchange Server » Version: Any

cpe:2.3:a:microsoft:exchange_server:*
Microsoft » Exchange Server » Version: 2016

cpe:2.3:a:microsoft:exchange_server:2016
Microsoft » Exchange Server » Version: 2019

cpe:2.3:a:microsoft:exchange_server:2019

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-47631

Products

Pricing

Contact Us