CVE-2017-11932

Description

Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability".

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11932

http://www.securitytracker.com/id/1039996

http://www.securityfocus.com/bid/102060

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3