Multiple vulnerabilities in Microsoft Exchange Server

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Improper web request handling at Outlook Web Access can be exploited remotely via a specially designed web application request to obtain sensitive information;
2. Improper emails sanitization at Outlook Web Access can be exploited remotely via a specially designed email to spoof user interface.

Ursprüngliche Informationshinweise

• CVE-2015-2544

• CVE-2015-2505
• CVE-2015-2543

CVE Liste

• CVE-2015-2544
  warning
• CVE-2015-2505
  warning
• CVE-2015-2543
  warning

KB Liste

• 3089250
• 3087126

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com