Code injection in Microsoft Exchange Server

Description

Multiple XSS vulnerabilities were found in Microsoft Exchange Server. By exploiting these vulnerabilities malicious users can inject arbitrary web script or spoof user interface. These vulnerabilities can be exploited remotely via a specially designed URL, msgParam or other unknown vectors.

Original advisories

• CVE-2015-1629

• CVE-2015-1628
• CVE-2015-1631
• CVE-2015-1630
• CVE-2015-1632

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2015-1629
  warning
• CVE-2015-1628
  warning
• CVE-2015-1631
  warning
• CVE-2015-1630
  warning
• CVE-2015-1632
  warning

KB list

• 3040856

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com