Not rated

CVE-2017-0110 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to…

Description

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."

Affected products and versions

Product	Affected versions	Fixed in
Exchange Server	Versions not published

References

96621 www.securityfocus.com
portal.msrc.microsoft.com portal.msrc.microsoft.com
1038011 www.securitytracker.com

Timeline

Published March 17, 2017
Last modified August 5, 2024

The 3 CVEs of Exchange Server →

CVE-2018-0941 Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an… Not rated CVE-2018-0924 Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18,… Not rated

Track this CVE

CVE-2017-0110 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to…

Description

Affected products and versions

References

Timeline

Other CVEs of Exchange Server