CVE-2000-0124: Undefined Security Weakness

surfCONTROL SuperScout does not properly asign a category to web sites with a . dot at the end, which may allow users to bypass web access restrictions...

ms.exchange.outlook.javascript.txt

Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...

CVE-1999-0541

A password for accessing a WWW URL is guessable...

Security update 1970-01-01

...

Update Rollup 2 for Windows Small Business Server 2011 Standard is available

None None...

Update Rollup 1 for Windows Small Business Server 2011 Standard is available

None None...

Update Rollup 3 for Windows Small Business Server 2011 Standard is available

None None...

Security Update For Exchange Server 2013 SP1 (KB4012178)

An elevation of privilege vulnerability exists in the way that Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. To exploit the vulnerability, an attacker who successfully exploited this vulnerability could, perform script/content injection attacks, and attempt to...

Security Update For Exchange Server 2013 SP1 (KB4092041)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update For Exchange Server 2013 CU19 (KB4073392)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update For Exchange Server 2016 CU9 (KB4092041)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update For Exchange Server 2016 CU7 (KB4073392)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update For Exchange Server 2016 CU6 (KB4045655)

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerabilities could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...

Security Update for Exchange 2000 Server Service Pack 3 (KB976703)

A security issue has been identified that could allow an attacker with limited access to increase their privileges to compromise Outlook Web Access for Exchange 2000 Server and gain control over it. We recommend that you install this update on all Microsoft Exchange 2000 Server systems in your...

Update for Office Communications Server 2007 R2, Communicator Web Access (KB 2603287)

This Package fixes some issues described in KB Article 2603287...

Update for Office Communications Server 2007 R2, Communicator Web Access (KB 975614)

This Package fixes some issues described in KB Article 975614...

Security Update For Exchange Server 2013 CU14 (KB4012178)

An elevation of privilege vulnerability exists in the way that Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. To exploit the vulnerability, an attacker who successfully exploited this vulnerability could, perform script/content injection attacks, and attempt to...

Security Update For Exchange Server 2013 CU12 (KB3150501)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...

Security Update For Exchange Server 2016 CU1 (KB3150501)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...

Security Update For Exchange Server 2013 CU11 (KB3150501)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...