A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka “Microsoft Exchange Spoofing Vulnerability.” This affects Microsoft Exchange Server.
[
{
"product": "Microsoft Exchange Server",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "2016 Cumulative Update 8"
},
{
"status": "affected",
"version": "2016 Cumulative Update 9"
}
]
}
]