Vulnerability Details CVE-2017-8758
Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://www.securityfocus.com/bid/100723
- http://www.securitytracker.com/id/1039320
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8758
- http://www.securityfocus.com/bid/100723
- http://www.securitytracker.com/id/1039320
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8758
Products affected by CVE-2017-8758
-
cpe:2.3:a:microsoft:exchange_server:2016