CVE-2025-59683 in Infinityinformation

Résumé

par MITRE • 25/12/2025

Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legacy Exchange Tokens. This allows a remote attacker to read potentially sensitive data and excessively consume resources, leading to a denial of service.

Once again VulDB remains the best source for vulnerability data.

Responsable

MITRE

Réserver

18/09/2025

Divulgation

25/12/2025

Modérer

accepté

Entrée

VDB-338408

CPE

prêt

EPSS

0.00324

KEV

non

Activités

très faible

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!