2255 matches found
ms.exchange.outlook.javascript.txt
Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...
CVE-1999-0541
A password for accessing a WWW URL is guessable...
Security Update for Microsoft Visual Studio 2010 Service Pack 1 TFS Web Access (KB2719584)
This update addresses cross site scripting vulnerabilities in TFS Web Access for Team Foundation Server 2010 SP1...
Security Update For Exchange Server 2013 CU20 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update for Exchange Server 2003 Service Pack 2 (KB950159) - Non-cluster
This Update is for non-clustered Exchange servers. A security issue has been identified that could allow an attacker with limited access to increase their privileges to compromise Outlook Web Access for Microsoft Exchange Server and gain control over it. You can help protect your computer by...
Security Update For Exchange Server 2013 CU11 (KB3150501)
This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...
Security Update For Exchange Server 2013 SP1 (KB3150501)
This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...
Security Update For Exchange Server 2016 RTM (KB3150501)
This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...
Security Update For Exchange Server 2013 CU12 (KB3150501)
This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...
Security Update For Exchange Server 2016 CU1 (KB3150501)
This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...
Security Update For Exchange Server 2013 CU14 (KB4012178)
An elevation of privilege vulnerability exists in the way that Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. To exploit the vulnerability, an attacker who successfully exploited this vulnerability could, perform script/content injection attacks, and attempt to...
Update Rollup 20 for Exchange Server 2010 Service Pack 3 (KB4073537)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2016 CU8 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Update Rollup 21 for Exchange Server 2010 Service Pack 3 (KB4091243)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2013 CU19 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2013 SP1 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2019 CU1 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2013 SP1 (KB3087126)
This security update resolves a vulnerability in Microsoft Exchange Server. The vulnerability could allow information disclosure if Outlook Web Access OWA fails to properly handle web server requests...
Security Update For Exchange Server 2016 CU11 (KB4487563)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...