3051 matches found
The vulnerability of Microsoft Exchange Server servers allows attackers to gain access to protected information from the Outlook application.
The vulnerability of Microsoft Exchange Server servers is related to improper analysis of email messages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information in the Outlook application by using the “Send As” command...
Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2016-07681)
Microsoft Exchange Server is a suite of e-mail service components from Microsoft. Microsoft Exchange Server cross-site scripting vulnerability can be exploited by a remote attacker to inject arbitrary Web script or HTML via a meeting invitation request...
CVE-2016-3378
Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka...
CVE-2016-0138
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...
CVE-2016-0138
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...
Information disclosure
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...
Open redirect
Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka...
CVE-2016-3378
CVE-2016-3378 describes an Open Redirect vulnerability in Microsoft Exchange Server. Affected products include Microsoft Exchange Server 2013 SP1 and 2013 CU12/CU13, and 2016 CU1/CU2. The issue lets an attacker supply a crafted URL that redirects users to arbitrary external sites, enabling phishi...
CVE-2016-0138
CVE-2016-0138 affects Microsoft Exchange Server components across multiple versions (2007 SP3, 2010 SP3, 2013 SP1, 2013 CU12/CU13, 2016 CU1/CU2). The issue stems from misparsing of unstructured email content, which could allow remote authenticated attackers to disclose sensitive information from ...
CVE-2016-3379
CVE-2016-3379 is an XSS in Microsoft Exchange Server 2016 (CU1/CU2) that can be exploited remotely via a meeting invitation request to inject arbitrary script/HTML. The connected documents confirm the vulnerability and reference the MS16-108 update, but do not provide exploit details. Remediation...
Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2016-07584)
Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability by...
Microsoft Exchange Server Multiple Vulnerabilities (3185883)
This host is missing an important security update according to Microsoft Bulletin MS16-108. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Microsoft Exchange Server Information Disclosure Vulnerabilities (3185883)
This host is missing an important security update according to Microsoft Bulletin MS16-108. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Microsoft Exchange Server Open Redirect Vulnerability
Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An open redirection vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability by sendi...
Microsoft and Adobe Rolls Out Critical Security Updates - Patch Now!
In Brief You should not miss this month’s Patch Updates, as it brings fixes for critical issues in Adobe Flash Player, iOS, Xcode, the Apple Watch, Windows, Internet Explorer, and the Edge browser. Adobe has rolled out a critical update to address several issues, most of which are Remote Code...
Microsoft Fixes 47 Vulnerabilities with September Patch Tuesday
Microsoft patched 47 vulnerabilities as part of 14 security bulletins, seven critical, with its monthly Patch Tuesday updates today. The company is warning users that if left unpatched, 10 of the issues can lead to remote execution. The updates resolve issues in Microsoft Windows, Office, Office...
MS16-108: Description of the security update for Exchange Server 2016 and 2013: September 13, 2016
None None...
MS16-108: Update Rollup 15 for Exchange Server 2010 Service Pack 3: September 13, 2016
MS16-108: Update Rollup 15 for Exchange Server 2010 Service Pack 3: September 13, 2016 Summary This update rollup is included in a security update. This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow remote code execution ...
MS16-108: Update Rollup 21 for Exchange Server 2007 Service Pack 3: September 13, 2016
MS16-108: Update Rollup 21 for Exchange Server 2007 Service Pack 3: September 13, 2016 Summary This update rollup is included in a security update. This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow remote code execution ...