CVE-2013-5072

The CVE-2013-5072 entry refers to a cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) of Microsoft Exchange Server 2010 SP2/SP3 and 2013 Cumulative Updates 2 and 3. The vulnerability arises from improper sanitization of input in OWA, permitting a crafted URL to inject arbitrary...