CVE-2000-0124: Undefined Security Weakness

surfCONTROL SuperScout does not properly asign a category to web sites with a . dot at the end, which may allow users to bypass web access restrictions...

ms.exchange.outlook.javascript.txt

Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...

CVE-1999-0541

A password for accessing a WWW URL is guessable...

Update Rollup for Office Communications Server 2007 R2 Communicator Web Access (KB2765224)

This Package fixes some issues described in KB Article 2765224...

Security Update For Exchange Server 2013 CU10 (KB3124557)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow spoofing if Outlook Web Access OWA fails to properly handle web requests, and sanitize user input and email content...

Security Update For Exchange Server 2013 CU11 (KB3124557)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow spoofing if Outlook Web Access OWA fails to properly handle web requests, and sanitize user input and email content...

Security Update for Microsoft Visual Studio 2010 Service Pack 1 TFS Web Access (KB2719584)

This update addresses cross site scripting vulnerabilities in TFS Web Access for Team Foundation Server 2010 SP1...

Security Update for Microsoft Web Access Companion 2010 (KB2346411)

A security vulnerability exists in Microsoft Office Web Access Companion 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update For Exchange Server 2013 CU20 (KB4092041)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update for Exchange 2000 Server Service Pack 3 (KB976703)

A security issue has been identified that could allow an attacker with limited access to increase their privileges to compromise Outlook Web Access for Exchange 2000 Server and gain control over it. We recommend that you install this update on all Microsoft Exchange 2000 Server systems in your...

Security Update For Exchange Server 2013 CU19 (KB4073392)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update For Exchange Server 2013 CU18 (KB4073392)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update For Exchange Server 2016 CU7 (KB4073392)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update For Exchange Server 2013 SP1 (KB4073392)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update for Microsoft Visual Studio Team Foundation Server 2013 (KB2903566)

This security update resolves a privately reported vulnerability in TFS 2013 web access. The vulnerability could allow java script to be executed on a vulnerable browser if an attacker sends a specially crafted message...

Security Update For Exchange Server 2013 CU8 (KB3087126)

This security update resolves a vulnerability in Microsoft Exchange Server. The vulnerability could allow information disclosure if Outlook Web Access OWA fails to properly handle web server requests...

Security Update For Exchange Server 2013 CU9 (KB3087126)

This security update resolves a vulnerability in Microsoft Exchange Server. The vulnerability could allow information disclosure if Outlook Web Access OWA fails to properly handle web server requests...

Security Update for Exchange Server 2003 Service Pack 2 (KB950159) - Non-cluster

This Update is for non-clustered Exchange servers. A security issue has been identified that could allow an attacker with limited access to increase their privileges to compromise Outlook Web Access for Microsoft Exchange Server and gain control over it. You can help protect your computer by...

Security Update for Exchange Server 2003 Service Pack 2 (KB950159) - Cluster

This update is for any clustered Exchange servers.A security issue has been identified that could allow an attacker with limited access to increase their privileges to compromise Outlook Web Access for Microsoft Exchange Server and gain control over it. You can help protect your computer by...

Security Update For Exchange Server 2016 CU9 (KB4092041)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...