Skip to content
OpenAdvisories
Unscored CVE-2017-0110 EUVD-2017-0477GHSA-54rc-hfr6-cj3x

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web scr…

Published Mar 17, 2017 · Updated Aug 5, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Exchange Server

Description

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."

Affected products

VendorProductAffectedFixed
Microsoft Exchange Server Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server Cumulative Update 14, and Microsoft Exchange Server 2016 Cumulative Update 3 —

References