CVE-2017-8758

2017-09-1200:00:00

microsoft

www.cve.org

EPSS

0.003

Percentile

68.9%

JSON

Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka “Microsoft Exchange Cross-Site Scripting Vulnerability.”

CNA Affected

[
  {
    "product": "Microsoft Exchange Server 2016",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Exchange Server 2016 Cumulative Update 6"
      }
    ]
  }
]