Multiple vulnerabilities in Microsoft Exchange Server

Description

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to gain privileges or spoof user interface.

Below is a complete list of vulnerabilities

1. An improper tokens validation can be exploited remotely via an unspecified vectors;
2. XSS vulnerability can be exploited remotely via a specially designed URL.

Original advisories

• CVE-2014-6325

• CVE-2014-6319
• CVE-2014-6336
• CVE-2014-6326

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2014-6325
  warning
• CVE-2014-6319
  critical
• CVE-2014-6336
  warning
• CVE-2014-6326
  warning

KB list

• 3011140
• 2986475
• 2996150
• 3009712

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com