2256 matches found
CVE-2000-0124
surfCONTROL SuperScout does not properly asign a category to web sites with a . dot at the end, which may allow users to bypass web access restrictions...
ms.exchange.outlook.javascript.txt
Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...
CVE-1999-0541
A password for accessing a WWW URL is guessable...
Update Rollup 21 for Exchange Server 2010 Service Pack 3 (KB4091243)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2013 CU19 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2016 CU11 (KB4487563)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2019 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2016 CU11 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2019 CU1 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Detectoid for Microsoft Office Communications Server 2007 R2, Communicator Web Access
Detectoid for Microsoft Office Communications Server 2007 R2, Communicator Web Access...
Office Live Add-in
Microsoft Office Live Add-in for Office is a small program that you install on your local computer to extend your Microsoft Office experience to the Web. The Office Live Add-in installs a new toolbar in Microsoft Office XP and Microsoft Office 2003, and new menu options in the 2007 Microsoft Offi...
Update Rollup 1 for Windows Small Business Server 2011 Standard is available
None None...
Security Update For Exchange Server 2013 SP1 (KB4073392)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2016 CU7 (KB4073392)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2013 CU18 (KB4073392)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update For Exchange Server 2013 CU22 (KB4487563)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2013 CU6 (KB3011140)
The security update addresses the vulnerabilities by ensuring that Outlook Web Access properly validates request tokens and by ensuring that URLs are properly sanitized...
Update for Office Communications Server 2007 R2, Communicator Web Access (KB 975614)
This Package fixes some issues described in KB Article 975614...
Security Update For Exchange Server 2013 SP1 (KB3011140)
The security update addresses the vulnerabilities by ensuring that Outlook Web Access properly validates request tokens and by ensuring that URLs are properly sanitized...
Security Update For Exchange Server 2013 CU10 (KB3124557)
This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow spoofing if Outlook Web Access OWA fails to properly handle web requests, and sanitize user input and email content...