CVE-2018-16793: Server-Side Request Forgery (SSRF)

Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA Outlook Web Access login page...

PT-2018-13753

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions prior to Rollup 18 for Microsoft Exchange Server 2010 SP3 Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It can be exploited via the username parameter in the...