CVE-2024-49040
Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Spoofing Vulnerability
We have discovered 761 live websites that are affected by CVE-2024-49040.
Affected Software
| Product |  Microsoft Exchange Server |
| Category | Web Mail |
| Vulnerable Domains | 761 live websites (9.32% of Microsoft Exchange Server install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 13 versions ( 14% of all versions) |
Common Weakness Enumeration
CWE-451 User Interface (UI) Misrepresentation of Critical InformationDetails
- Published - Nov 12, 2024
- Updated - Jul 8, 2025
CVE References
CWE References
CWE
Website Distribution by Country
Number of websites using CVE-2024-49040 United States | 160 websites |
 Russia | 65 websites |
 Germany | 36 websites |
 France | 36 websites |
 GB | 26 websites |
 Australia | 23 websites |
 China | 23 websites |
 Italy | 22 websites |
 Canada | 20 websites |
 Iran | 16 websites |
Website Distribution by TLD
Number of websites using CVE-2024-49040| .com | 229 websites |
| .ru | 51 websites |
| .org | 46 websites |
| .net | 31 websites |
| .de | 27 websites |
| .it | 20 websites |
| .co.uk | 17 websites |
| .fr | 14 websites |
| .com.au | 13 websites |
| .cz | 10 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2024-49040
Top websites that are affected by CVE-2024-49040. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***.ms |  Montserrat | ***,*** | |
| *******.******.se |  Sweden | ***,*** | |
| ******.ru | Russia | ***,*** | |
| ****.******.net | Russia | ***,*** | |
| ******.***.tr |  Turkey | ***,*** | |
| ***************.**.uk | GB | *,***,*** | |
| **.*****.**.us | United States | *,***,*** | |
| ******.ru | Russia | *,***,*** | |
| *******************.com | United States | *,***,*** | |
| ******.com | China | *,***,*** |
FAQ
CVE-2024-49040 is User Interface (UI) Misrepresentation of Critical Information in Microsoft Exchange Server
A total of 761 websites have been identified as vulnerable to CVE-2024-49040, based on global website indexing conducted by WebTechSurvey.
The Microsoft Exchange Server is affected by the CVE-2024-49040 vulnerability.
Microsoft Exchange Server versions up to 15.2.1258.39 are vulnerable to CVE-2024-49040.
CVE-2024-49040 is resolved in version 15.2.1258.39 of Microsoft Exchange Server.