Back to Database
Status published
High
CVE-2025-59683
Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access...
Vulnerability Description
Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legacy Exchange Tokens. This allows a remote attacker to read potentially sensitive data and excessively consume resources, leading to a denial of service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59683
Credits & Attribution
No credits recorded in the NVD database.
More from Pexip
View All →CVE-2025-66443
Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations...
High
7.5
CVE-2025-66379
Pexip Infinity before 39.0 has Improper Input Validation in the...
High
7.5
CVE-2025-66378
Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access...
Medium
5.9
CVE-2025-66377
Pexip Infinity before 39.0 has Missing Authentication for a Critical...
High
7.5
CVE-2025-49088
Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations...
Medium
5.9
Affected Vendor
Pexip
View all reports →Affected Software
Infinity
Vulnerable Versions:
15.0
Timeline
Official Publish:
December 25th, 2025
Last Modified:
December 26th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H