MEDIUM 6.5 Microsoft

CVE-2025-21193

Active Directory Federation Server Spoofing Vulnerability

Microsoft Security Update 2025-Jan: Active Directory Federation Server Spoofing Vulnerability

Affected Products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025
Windows Server 2016

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21193
https://nvd.nist.gov/vuln/detail/CVE-2025-21193

Published: 2025-01-14 · Source: Microsoft · Feed updated: 2026-08-11

This medium severity vulnerability with a CVSS score of 6.5 was published on 2025-01-14 via Microsoft. Affected: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022 and 5 more.

vulnfeed aggregates 10103 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.