2636 matches found
CVE-2000-0124: Undefined Security Weakness
surfCONTROL SuperScout does not properly asign a category to web sites with a . dot at the end, which may allow users to bypass web access restrictions...
ms.exchange.outlook.javascript.txt
Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...
CVE-1999-0541
A password for accessing a WWW URL is guessable...
Security update 1970-01-01
...
Security Update For Exchange Server 2013 SP1 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Update Rollup 20 for Exchange Server 2010 Service Pack 3 (KB4073537)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2013 CU19 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Update Rollup 21 for Exchange Server 2010 Service Pack 3 (KB4091243)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2013 SP1 (KB4012178)
An elevation of privilege vulnerability exists in the way that Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. To exploit the vulnerability, an attacker who successfully exploited this vulnerability could, perform script/content injection attacks, and attempt to...
Security Update For Exchange Server 2013 SP1 (KB3087126)
This security update resolves a vulnerability in Microsoft Exchange Server. The vulnerability could allow information disclosure if Outlook Web Access OWA fails to properly handle web server requests...
Update for Office Communications Server 2007 R2, Communicator Web Access (KB 2603287)
This Package fixes some issues described in KB Article 2603287...
Security Update For Exchange Server 2016 CU11 (KB4487563)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2019 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2016 CU11 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2019 CU1 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2019 (KB4487563)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2016 CU12 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Office Live Add-in
Microsoft Office Live Add-in for Office is a small program that you install on your local computer to extend your Microsoft Office experience to the Web. The Office Live Add-in installs a new toolbar in Microsoft Office XP and Microsoft Office 2003, and new menu options in the 2007 Microsoft Offi...