CVE-2022-41078

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability


We have discovered 3,699 live websites that are affected by CVE-2022-41078.

Run a Free Instant Scan




Affected Software

Product  Microsoft Exchange Server
Category Web Mail
Vulnerable Domains3,699 live websites (43% of Microsoft Exchange Server install base)
Vulnerable Versions
  • from 15 through 15.1.2375.37
  • from 15.1 through 15.1.2507.16
  • from 15.2 through 15.2.1118.20
Vulnerable Versions Count63 versions ( 58% of all versions)



Details

  • Published - Nov 9, 2022
  • Updated - Aug 10, 2026

Website Distribution by Country

Number of websites using CVE-2022-41078
United States819 websites



Russia280 websites
Germany186 websites
GB139 websites
France120 websites
China118 websites
Czech Republic114 websites
Canada108 websites
Italy101 websites
Taiwan87 websites

Website Distribution by TLD

Number of websites using CVE-2022-41078
.com1,050 websites
.org257 websites
.ru233 websites
.de145 websites
.net117 websites
.cz103 websites
.it80 websites
.fr78 websites
.co.uk53 websites
.edu48 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2022-41078

Top websites that are affected by CVE-2022-41078. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**.de Germany**,***
***.***.tw Taiwan**,***
***************.fr France***,***
*******.***.tw Taiwan***,***
**********.gr Greece***,***
*******.ru Russia***,***
******.ru Russia***,***
***********.to Tonga***,***
***.***.cl Chile***,***
******.***.tr Turkey***,***
See full domain list

FAQ

A total of 3,699 websites have been identified as vulnerable to CVE-2022-41078, based on global website indexing conducted by WebTechSurvey.
The Microsoft Exchange Server is affected by the CVE-2022-41078 vulnerability.
Microsoft Exchange Server versions up to 15.2.1118.20 are vulnerable to CVE-2022-41078.
CVE-2022-41078 is resolved in version 15.2.1118.20 of Microsoft Exchange Server.