CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server Security Feature Bypass Vulnerability |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server Information Disclosure Vulnerability |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server Elevation of Privilege Vulnerability |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server Elevation of Privilege Vulnerability |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server Elevation of Privilege Vulnerability |
Microsoft Exchange Server Elevation of Privilege Vulnerability |
Microsoft Exchange Server Spoofing Vulnerability |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server Spoofing Vulnerability |
Microsoft Exchange Server Information Disclosure Vulnerability |
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8559. |
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability". |
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." |