3051 matches found
CVE-2017-8541
CVE-2017-8541 concerns the Microsoft Malware Protection Engine (MMPE) remote code execution vulnerability. Multiple sources confirm MMPE fails to properly scan a specially crafted file, causing memory corruption and potentially arbitrary code execution. Exploitation indicators include exploits li...
CVE-2017-8535
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...
CVE-2017-8541
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...
CVE-2017-8540
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...
CVE-2017-8538
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...
KLA11839 Multiple vulnerabilities in Microsoft Exchange Server
Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Malware Protection Engine can ...
The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.
The vulnerability of Microsoft Exchange Server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code via email or chat clients...
Draft folder emails in Secure Mail not syncing with MS Exchange
Q: Users create drafts in Secure Mail but these do not get synced with MS Exchange and viewable in Outlook. After repeated attempts to amend and save the draft it will be deleted without being synced. Is this a known issue? A: With regard to the Draft folder syncing, there are limitation regardin...
MS17-015: Security Update for Microsoft Exchange Server (4013242)
The remote Microsoft Exchange Server is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in Outlook Web Access OWA due to improper handling of web requests. An unauthenticated, remote attacker can exploit this issue, via a specially crafted email...
Microsoft Exchange Server Remote Privilege Elevation Vulnerability
Microsoft Exchange Server is a mail service program developed by Microsoft. An unspecified security vulnerability exists in Microsoft Exchange Outlook Web Access OWA when it fails to properly process Web requests, which could be exploited by an attacker to submit a special request for elevated...
Microsoft Exchange Server Remote Privilege Escalation Vulnerability (4013242)
This host is missing an important security update according to Microsoft Bulletin MS17-015. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
MS17-015: Description of the security update for Exchange Server 2016 and Exchange Server 2013: March 14, 2017
None None...
Microsoft Exchange Server CVE-2017-0110 Remote Privilege Escalation Vulnerability
Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 14 Microsoft Exchange Server 2013 SP1 Microsoft Exchange Server 2016...
KLA10982 PE vulnerability in Microsoft Server Software
An improper handling of web requests was found in Microsoft Outlook Web Access. By exploiting this vulnerability malicious users can gain privileges. A successful exploit allows attackers to perform content/script injection attacks, make user disclose sensitive information. This vulnerability can...
MS17-015: Security Update for Microsoft Exchange Server: March 14, 2017
Resolves a vulnerability in the Microsoft Exchange Outlook Web Access OWA.SummaryThis update resolves a vulnerability in the Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow remote code execution in Exchange Server if an attacker sends an email that includes a specially...
Update Rollup 10 for System Center 2012 R2 Data Protection Manager
Update Rollup 10 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 10 for Microsoft System Center 2012 R2 Data Protection Manager. Additionally, this article contains the installation instructions for this update. Note...
OWA and Offic365 two-factor authentication bypass-vulnerability warning-the black bar safety net
Foreword Full disclosure: the BLACK HILLS information security very much in favor of responsible disclosure of vulnerabilities. 2 0 1 6 9 2 8, I to Microsoft reported this vulnerability, may have been to this article publishing 2016.11.2, Microsoft for this vulnerability is always without any...
Outlook Web Access Two-Factor Authentication Bypass Exists
Enterprises running Exchange Server have been operating under a false sense of security with regard to two-factor authentication implementations on Outlook Web Access OWA adding an extra layer of protection. A design weakness has been exposed that can allow an attacker to easily bypass 2FA and...
HPE Sizer for Microsoft Exchange Server Detection (Windows SMB Login)
Detects the installed version of HPE Sizer for Microsoft Exchange Server. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
HPE Sizer for Microsoft Exchange Server Remote Arbitrary Code Execution Vulnerability
HPE Sizer for Microsoft Exchange Server is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...