CVE-2018-8159

CVE-2018-8159 is an elevation-of-privilege issue in Microsoft Exchange Server related to Outlook Web Access (OWA) not handling web requests properly. The connected Nessus plugin text indicates exploitation could allow script/content injection and user-information disclosure; it does not provide c...

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: Microsoft Common...

KLA11242 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information and spoof user interface. Below is a complete list of vulnerabilities: 1. An improper handling of objects in...

Microsoft Exchange Server CVE-2018-8159 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 19 Microsoft Exchange Server 2013 Cumulative Update 20 Microsoft...