Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8560.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Exchange | — | Download and install Microsoft KB4018588 | Aug 10, 2023 | Jul 11, 2017 |
| Msft | — | Security Update For Exchange Server 2013 SP1 (KB4018588)Security Update For Exchange Server 2013 CU16 (KB4018588)Update Rollup 18 for Exchange Server 2010 Service Pack 3 (KB4018588) | Jul 11, 2017 | Jul 11, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub