Vaibhavi Kalgutkar

**Name of the Vulnerable Software and Affected Versions** M365 Copilot (affected versions not specified) **Description** M365 Copilot contains an open redirect issue, which occurs when an application redirects users to an untrusted external site. This flaw allows an unauthorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** An improper authorization issue leads to Server-side Request Forgery (SSRF), a flaw where a server is tricked into making unintended requests to an internal or external resource. This allows an authorized attacker to disclose information over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.