CVE-2019-0858
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0817.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - secure@microsoft.com
- Published
- 2019-04-09
- Last modified
- 2024-08-04
- Weaknesses
- CWE-79
Affected products
- Exchange Server (Microsoft)
- Microsoft Exchange Server (Microsoft)
- Microsoft Exchange Server 2013 (Microsoft)
- Microsoft Exchange Server 2016 (Microsoft)
- Microsoft Exchange Server 2019 (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0858
