vulnerability
Microsoft Exchange: CVE-2020-0903: Microsoft Exchange Server Spoofing Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:S/C:N/I:P/A:N) | Mar 12, 2020 | Aug 10, 2023 | Dec 7, 2023 |
Severity
4
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
Mar 12, 2020
Added
Aug 10, 2023
Modified
Dec 7, 2023
Description
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Solution(s)
microsoft-exchange-exchange_server_2016_CU14-kb4540123microsoft-exchange-exchange_server_2016_CU15-kb4540123microsoft-exchange-exchange_server_2019_CU3-kb4540123microsoft-exchange-exchange_server_2019_CU4-kb4540123
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.