A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability." This affects Microsoft Exchange Server.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153