vulnerability

Microsoft Exchange: CVE-2017-11932: Microsoft Exchange Spoofing Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:N)

Published

Dec 12, 2017

Added

Aug 10, 2023

Modified

Jun 3, 2026

Description

Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability".

Solutions

microsoft-exchange-exchange_server_2016_CU6-kb4045655microsoft-exchange-exchange_server_2016_CU7-kb4045655

References

CVE-2017-11932
https://attackerkb.com/topics/CVE-2017-11932
CWE-20
EUVD-EUVD-2017-3518
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3518
https://support.microsoft.com/help/4045655

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report