Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-11932
HistoryDec 12, 2017 - 9:29 p.m.

CVE-2017-11932

2017-12-1221:29:01
CWE-20
[email protected]
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON

Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka “Microsoft Exchange Spoofing Vulnerability”.

Affected configurations

NVD
Node
microsoftexchange_serverMatch2016cumulative_update_6
OR
microsoftexchange_serverMatch2016cumulative_update_7

Related

mscve 1
cvelist 1
nessus 1
prion 1
symantec 1
kaspersky 1
cve 1
mskb 1
talosblog 1
trendmicroblog 1
mscve
mscve
Microsoft Exchange Spoofing Vulnerability
2017-12-12 08:00:00
cvelist
cvelist
CVE-2017-11932
2017-12-12 00:00:00
nessus
nessus
Security Updates for Exchange (December 2017)
2017-12-12 00:00:00
prion
prion
Spoofing
2017-12-12 21:29:00
symantec
symantec
Microsoft Exchange Server CVE-2017-11932 Spoofing Vulnerability
2017-12-12 00:00:00
kaspersky
kaspersky
KLA11159 SUI vulnerability in Microsoft Exchange Server
2017-12-12 00:00:00
cve
cve
CVE-2017-11932
2017-12-12 21:29:01
mskb
mskb
Description of the security update for Microsoft Exchange: December 12, 2017
2017-12-12 08:00:00
talosblog
talosblog
Microsoft Patch Tuesday - December 2017
2017-12-12 15:32:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of December 11, 2017
2017-12-15 16:06:45

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON
Related for NVD:CVE-2017-11932
mscve1cvelist1nessus1prion1symantec1kaspersky1cve1mskb1talosblog1trendmicroblog1