3093 matches found
Microsoft Exchange Server CVE-2019-1137 Spoofing Vulnerability
Description Microsoft Exchange Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Exchan...
Exploit for CVE-2019-1040
CVE-2019-1040 Great writeup! Exploiting CVE-2019-1040 - Comb...
Security Updates for Exchange (June 2019)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by a spoofing vulnerability when Outlook Web Access fails to property handle web requests. An unauthenticated, remote attacker can exploit this by sending in a specially crafted link...
Microsoft Exchange Server Defense in Depth Update
Microsoft has released an update for Microsoft Exchange Server that provides enhanced security as a defense in depth measure, preventing crashes from uploading certain file types...
Description of the security update for Microsoft Exchange Server 2013 and 2010: June 11, 2019
Description of the security update for Microsoft Exchange Server 2013 and 2010: June 11, 2019 This update rollup is a security update. This update provides a security advisory in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures...
KLA11492 Bypass security restrictions vulnerability in Microsoft Exchange Server
Microsoft has released an update for Microsoft Exchange Server that provides enhanced security as a defense in depth measure, preventing crashes from uploading certain file types. Original advisories ADV190018 Related products Microsoft-Exchange-Server CVE list ADV190018 unknown KB list 4503027...
Microsoft Outlook Web Access for Exchange Server Email Field XSS Injection Vulnerability
Microsoft Exchange Server is a popular mail server, and Outlook Web Access is the tool used in Exchange to read and send mail through a Web browser. A cross-site scripting vulnerability exists in Outlook Web Access for Exchange Server that allows elevation of privilege on Exchange Server connecte...
The vulnerability of the Data Exchange Layer Platform, a messaging application between applications, and the Threat Intelligence Exchange Server, related to the lack of protection for operational data, allows access to confidential information.
The vulnerability of the Data Exchange Layer Platform, a messaging application between applications, and the Threat Intelligence Exchange Server, a threat protection system, is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain access...
Qualys Cloud Platform (VM, PC) 8.19 New Features
This new release of the Qualys Cloud Platform VM, PC, version 8.19, contains several new features and improvements in Qualys Vulnerability Management and Policy Compliance, which include an improved display of deadlines for remediation policies in VM; additional support for MS Exchange Server...
The vulnerability of the Outlook Web Access email server component of the Microsoft Exchange Server allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a...
The vulnerability of the Outlook Web Access email server component of the Microsoft Exchange Server allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server is related to errors in processing web requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through speciall...
Security Updates for Exchange (April 2019)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who...
CVE-2019-0858
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0817...
CVE-2019-0858
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0817...
CVE-2019-0817
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858...
CVE-2019-0817
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858...
Spoofing
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0817...
Microsoft Releases April 2019 Security Updates — Two Flaws Under Active Attack
Microsoft today released its April 2019 software updates to address a total of 74 CVE-listed vulnerabilities in its Windows operating systems and other products, 13 of which are rated critical and rest are rated Important in severity. April 2019 security updates address flaws in Windows OS,...