Medium (6.5) in microsoft exchange server. EPSS 4.6% chance of exploitation in the next 30 days.
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server.
Severity
CVSS 3.1
6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)