2006 matches found
CVE-2014-6326
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325...
CVE-2014-6325: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326...
PT-2014-7157
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Microsoft Exchange Server 2013 SP1 an...
CVE-2014-6326: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325...
Microsoft Exchange Server Multiple Vulnerabilities (3009712)
This host is missing an important security update according to Microsoft Bulletin MS14-075. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Microsoft Exchange Server Detection (Windows SMB Login)
SMB login-based detection of Microsoft Exchange Server. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
PT-2014-7167
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 Description A spoofing issue exists due to the improper validation of redirection tokens in Microsoft Outlook Web App OWA. This allows remote attackers to redirect users to arbitrary w...
Microsoft Exchange Server CVE-2014-6319 Tokens Validation Security Bypass Vulnerability
Description Microsoft Exchange Server is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access; this may aid in launching further attacks. This issue may allow a remote attacker to carry out phishing-style...
KLA10611 Multiple vulnerabilities in Microsoft Exchange Server
Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to gain privileges or spoof user interface. Below is a complete list of vulnerabilities 1. An improper tokens validation can be exploited remotely via an unspecified...
PT-2014-7156
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2013 SP1 Microsoft Exchange Server Cumulative Update 6 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Elevation of privilege is possible when the server does no...
MS14-075: Vulnerabilities in Microsoft Exchange Server could allow elevation of privilege: December 9, 2014
Resolves a vulnerability in Microsoft Exchange Server that could allow spoofing if an attacker sends an email message that contains a malicious link to a specially crafted website to a user on an affected Exchange server.INTRODUCTIONMicrosoft has released security bulletin MS14-075. To learn more...
Microsoft Exchange Server Outlook Web Access CVE-2014-6326 Cross Site Scripting Vulnerability
Description Microsoft Exchange Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...
Microsoft Exchange Server CVE-2014-6336 Tokens Validation URI Redirection Vulnerability
Description Microsoft Exchange Server is prone to a URI-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid ...
PT-2014-7152
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2007 SP3 through 2013 SP1 and Cumulative Update 6 Description A token spoofing issue exists due to the improper validation of tokens in requests by the Outlook Web App OWA in Microsoft Exchange Server. This...
Microsoft Windows Kernel 'Win32k.sys' CVE-2014-4113 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges and gain access to kernel memory. Technologies Affected Microsoft Exchange Server 2003 SP2 Microsoft Windows 7 for 32-bi...
Microsoft Exchange Server 4.0/5.0 SMTP HELO Argument Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8555/info It has been reported that Microsoft Exchange server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when...
Microsoft Exchange Server 2000/2003 Outlook Web Access Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18381/info Microsoft Exchange Server Outlook Web Access is prone to a script-injection vulnerability. A remote attacker can exploit this issue by sending a malicious email message to a vulnerable user. !/usr/bin/perl use...
CVE-2013-7369
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure...
PT-2014-3400
Name of the Vulnerable Software and Affected Versions F-Secure Anti-Virus for Microsoft Exchange Server versions prior to HF02 F-Secure Anti-Virus for Windows Servers 9.00 versions prior to HF09 F-Secure Anti-Virus for Citrix Servers 9.00 versions prior to HF09 F-Secure Email and Server Security...
