KLA11159 SUI vulnerability in Microsoft Exchange Server

Detect date:

12/12/2017

Severity:

Critical

Description:

Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link.

Affected products:

Microsoft Exchange Server 2013 Cumulative Update 17

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

ADV170023
CVE-2017-11932

Impacts:

SUI

Related products:

Microsoft Exchange Server

CVE-IDS:

CVE-2017-119325.8High

Microsoft official advisories:

KB list:

4045655