Code injection in Microsoft Exchange Server

Описание

Multiple XSS vulnerabilities were found in Microsoft Exchange Server. By exploiting these vulnerabilities malicious users can inject arbitrary web script or spoof user interface. These vulnerabilities can be exploited remotely via a specially designed URL, msgParam or other unknown vectors.

Первичный источник обнаружения

• CVE-2015-1629
  CVE-2015-1628
  CVE-2015-1631
  CVE-2015-1630
  CVE-2015-1632
  

Связанные продукты

• Microsoft-Exchange-Server

Список CVE

• CVE-2015-1629
  warning
• CVE-2015-1628
  warning
• CVE-2015-1631
  critical
• CVE-2015-1630
  warning
• CVE-2015-1632
  warning

Список KB

• 3040856

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com