Spoofing vulnerability in Microsoft Exchange Server

Description

Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link.

Original advisories

• CVE-2016-0032

• CVE-2016-0031
• CVE-2016-0030
• CVE-2016-0029

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2016-0032
  unknown
• CVE-2016-0031
  unknown
• CVE-2016-0030
  unknown
• CVE-2016-0029
  unknown

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com