CVE-2016-0032

CVE-2016-0032 is a cross-site scripting (XSS) vulnerability affecting Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, 2013 CU10, 2013 CU11, and 2016. The issue arises in OWA where a crafted URL enables remote attackers to inject arbitrary web script or HTML, described as an Exchan...

MS16-010: Security Update in Microsoft Exchange Server to Address Spoofing (3124557)

The remote Microsoft Exchange server is missing a security update. It is, therefore, affected by multiple spoofing vulnerabilities in Outlook Web Access OWA due to a failure to properly handle web requests. An attacker can exploit these vulnerabilities, via a crafted email containing a malicious...

KLA10736 Spoofing vulnerability in Microsoft Exchange Server

Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link. Original advisories CVE-2016-003...