Every CVE Search/ Get API key

CVE-2015-1631

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof...

5.0 Medium

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."

Exploit likelihood

9.15%Down 14.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."

Record
CVE-2015-1631
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-284
Updated
2026-11-02
CVE List No score

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."

Record
CVE-2015-1631
Updated
2026-11-02
EUVDEUVD-2015-1761 No score

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."

Record
EUVD-2015-1761
Updated
2026-11-03
GitHub AdvisoriesGHSA-7v6c-mcrv-7h8f No score

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof...

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."

Record
GHSA-7v6c-mcrv-7h8f
Weakness
CWE-284
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1631 is a medium vulnerability (CVSS 5.0) in Microsoft Exchange Server, published March 11, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.15%, the 95th percentile. No source names a fixed version.

References

MoveEnter Open