Security Update For Exchange Server 2013 CU6 (KB3011140)

The security update addresses the vulnerabilities by ensuring that Outlook Web Access properly validates request tokens and by ensuring that URLs are properly sanitized...

Security Update For Exchange Server 2016 CU18 (KB4581424)

A Microsoft Exchange information disclosure exists in how tokens are validated when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user...