CVE-2017-11932

2017-12-1200:00:00

microsoft

www.cve.org

7.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON

Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka “Microsoft Exchange Spoofing Vulnerability”.

CNA Affected

[
  {
    "product": "Microsoft Exchange Server",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5"
      }
    ]
  }
]