CVE-2016-0030

CVE-2016-0030 is a cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) of Microsoft Exchange Server, affecting Exchange Server 2013 SP1, 2013 CU10, and 2016. The root issue is improper handling of web requests that enables an attacker to inject arbitrary web script or HTML via a ...

MS16-010: Security Update in Microsoft Exchange Server to Address Spoofing (3124557)

The remote Microsoft Exchange server is missing a security update. It is, therefore, affected by multiple spoofing vulnerabilities in Outlook Web Access OWA due to a failure to properly handle web requests. An attacker can exploit these vulnerabilities, via a crafted email containing a malicious...

KLA10736 Spoofing vulnerability in Microsoft Exchange Server

Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link. Original advisories CVE-2016-003...