CVE-2016-3379: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, aka "Microsoft Exchange Elevation of Privilege Vulnerability."...

PT-2016-5438

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 versions Cumulative Update 1 through Cumulative Update 2 Description The issue allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request. An elevation of privilege...