CVE-2014-9360

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...

Xxe

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...

CVE-2014-9360

CVE-2014-9360 describes an XML External Entity (XXE) vulnerability in Scalix Web Access, affecting versions 11.4.6.12377 and 12.2.0.14697. The issue allows remote attackers to read arbitrary files and trigger requests to intranet servers through a crafted XML payload. The root cause is an XXE fla...

CVE-2014-9360

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...

CVE-2014-9352

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-9352

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-9352

CVE-2014-9352 affects Scalix Web Access (mail administration login panel) with XXE and XSS vulnerabilities disclosed across multiple databases. OpenVAS describes XXE and XSS in Scalix Web Access <= 11.4.6.12377 and <= 12.x

Microsoft Exchange Server Outlook Web Access Cross-Site Scripting (MS14-075; CVE-2014-6326)

An elevation of privilege vulnerability exists in Microsoft Exchange Server. The vulnerability is due to an error in Microsoft Exchange input validation. A remote attacker can exploit this issue by enticing a victim to open a specially crafted email with Microsoft Outlook Web Access OWA...

Microsoft Exchange Server Outlook Web Access URL Redirection (MS14-075; CVE-2014-6336)

A spoofing vulnerability exists in Microsoft Exchange Server. The vulnerability is due to an error in Microsoft Exchange when Microsoft Outlook Web Access OWA fails to properly validate redirection tokens. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

[SECURITY] Fedora 21 Update: zarafa-7.1.11-1.fc21

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

SEC Consult SA-20141031-0 :: XML External Entity Injection (XXE) and Reflected XSS in Scalix Web Access

SEC Consult Vulnerability Lab Security Advisory 20141031-0 ======================================================================= title: XML External Entity Injection XXE and Reflected XSS product: Scalix Web Access vulnerable version: 11.4.6.12377 and 12.2.0.14697 fixed version: - impact:...

Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attacker may leverage this issue to carry...

IBM Lotus Domino Server 6 - Web Access Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10641/info Lotus Domino Server is reported prone to a remote denial of service vulnerability. The issue is reported to exist when a malicious email that is received on the affected server, is opened through the Domino Web...

IBM Lotus Domino Web Access Upload Module Buffer Overflow

No description provided by source. $Id: ibmlotusdominodwauploadmodule.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensin...

Microsoft Exchange Server 2000/2003 Outlook Web Access Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18381/info Microsoft Exchange Server Outlook Web Access is prone to a script-injection vulnerability. A remote attacker can exploit this issue by sending a malicious email message to a vulnerable user. !/usr/bin/perl use...

Microsoft Outlook Web Access (OWA) 8.2.254.0 - Information Disclosure vulnerability

No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Microsoft Outlook Web Access OWA version 8.2.254.0 OS: Windows Server 2003 Internet Explorer 7 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ There is an information disclosure vulnerability in Microsoft...

Outlook Web Access 2003 CSRF Vulnerability

No description provided by source. Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Offi...

HP AdvanceStack Switch Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching. It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypassed by an...

Microsoft Outlook Web Access for Exchange Server 2003 'redir.asp' URI Redirection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks. OWA 6.5 SP 2 is...