Outlook Web Access (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2016-06-16. Vendor: Microsoft.

CVEs of Outlook Web Access

• CVE-2016-0028 - CVSS 5.5 (medium), 2016-06-16: Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not…
• CVE-2010-3213 - CVSS 6.8 (medium), 2010-09-07: Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the…
• CVE-2008-2248 - CVSS 4.3 (medium), 2008-07-08: Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or…
• CVE-2008-2143 - CVSS 1.9 (low), 2008-05-12: Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers…
• CVE-2005-1052 - CVSS 5 (medium), 2005-05-02: Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could…