CVE-2017-11932

EPSS 14.8%
Veröffentlicht 12.12.2017 21:29:01
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability".

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_6

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.8%	0.943

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.1	2.8	5.2	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/102060

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1039996

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11932

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-11932

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-11932

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-11932

EUVD