Lucene search

[email protected]CVE-2019-1266

HistorySep 11, 2019 - 10:15 p.m.

CVE-2019-1266

2019-09-1122:15:00

CWE-79

[email protected]

web.nvd.nist.gov

110

cve-2019-1266

microsoft exchange

spoofing vulnerability

nvd

outlook web app

security

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

7.5 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

41.4%

JSON

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka ‘Microsoft Exchange Spoofing Vulnerability’.

VendorProductVersionCPE
microsoftmicrosoft_exchange_server_2016Cumulative Update 12cpe:2.3:a:microsoft:microsoft_exchange_server_2016:Cumulative Update 12:*:*:*:*:*:*:*
microsoftmicrosoft_exchange_server_2016Cumulative Update 13cpe:2.3:a:microsoft:microsoft_exchange_server_2016:Cumulative Update 13:*:*:*:*:*:*:*
microsoftmicrosoft_exchange_server_2019Cumulative Update 1cpe:2.3:a:microsoft:microsoft_exchange_server_2019:Cumulative Update 1:*:*:*:*:*:*:*
microsoftmicrosoft_exchange_server_2019Cumulative Update 2cpe:2.3:a:microsoft:microsoft_exchange_server_2019:Cumulative Update 2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	microsoft_exchange_server_2016	Cumulative Update 12	cpe:2.3:a:microsoft:microsoft_exchange_server_2016:Cumulative Update 12:::::::*
microsoft	microsoft_exchange_server_2016	Cumulative Update 13	cpe:2.3:a:microsoft:microsoft_exchange_server_2016:Cumulative Update 13:::::::*
microsoft	microsoft_exchange_server_2019	Cumulative Update 1	cpe:2.3:a:microsoft:microsoft_exchange_server_2019:Cumulative Update 1:::::::*
microsoft	microsoft_exchange_server_2019	Cumulative Update 2	cpe:2.3:a:microsoft:microsoft_exchange_server_2019:Cumulative Update 2:::::::*