CVE-2017-8541

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

CVE-2017-8541

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

CVE-2017-8540

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

KLA11839 Multiple vulnerabilities in Microsoft Exchange Server

Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Malware Protection Engine can ...

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of Microsoft Exchange Server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code via email or chat clients...

MS17-015: Security Update for Microsoft Exchange Server (4013242)

The remote Microsoft Exchange Server is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in Outlook Web Access OWA due to improper handling of web requests. An unauthenticated, remote attacker can exploit this issue, via a specially crafted email...

Microsoft Exchange Server Remote Privilege Escalation Vulnerability (4013242)

This host is missing an important security update according to Microsoft Bulletin MS17-015. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Exchange Server CVE-2017-0110 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 14 Microsoft Exchange Server 2013 SP1 Microsoft Exchange Server 2016...

KLA10982 PE vulnerability in Microsoft Server Software

An improper handling of web requests was found in Microsoft Outlook Web Access. By exploiting this vulnerability malicious users can gain privileges. A successful exploit allows attackers to perform content/script injection attacks, make user disclose sensitive information. This vulnerability can...

MS17-015: Security Update for Microsoft Exchange Server: March 14, 2017

Resolves a vulnerability in the Microsoft Exchange Outlook Web Access OWA.SummaryThis update resolves a vulnerability in the Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow remote code execution in Exchange Server if an attacker sends an email that includes a specially...

HPE Sizer for Microsoft Exchange Server Detection (Windows SMB Login)

Detects the installed version of HPE Sizer for Microsoft Exchange Server. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Sizer for Microsoft Exchange Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Exchange Server is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2016-07681)

Microsoft Exchange Server is a suite of e-mail service components from Microsoft. Microsoft Exchange Server cross-site scripting vulnerability can be exploited by a remote attacker to inject arbitrary Web script or HTML via a meeting invitation request...

CVE-2016-3378

Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka...

CVE-2016-0138

Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...

Information disclosure

Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...

Open redirect

Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka...

CVE-2016-3378

CVE-2016-3378 describes an Open Redirect vulnerability in Microsoft Exchange Server. Affected products include Microsoft Exchange Server 2013 SP1 and 2013 CU12/CU13, and 2016 CU1/CU2. The issue lets an attacker supply a crafted URL that redirects users to arbitrary external sites, enabling phishi...

CVE-2016-3379

CVE-2016-3379 is an XSS in Microsoft Exchange Server 2016 (CU1/CU2) that can be exploited remotely via a meeting invitation request to inject arbitrary script/HTML. The connected documents confirm the vulnerability and reference the MS16-108 update, but do not provide exploit details. Remediation...

CVE-2016-0138

CVE-2016-0138 affects Microsoft Exchange Server components across multiple versions (2007 SP3, 2010 SP3, 2013 SP1, 2013 CU12/CU13, 2016 CU1/CU2). The issue stems from misparsing of unstructured email content, which could allow remote authenticated attackers to disclose sensitive information from ...