Description
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Exchange Server | 2010 Service Pack 3, 2019 | — |
| Microsoft | Microsoft Exchange Server 2016 | Cumulative Update 11, Cumulative Update 12 | — |
| Microsoft | Microsoft Exchange Server 2013 | Cumulative Update 22 | — |
| Microsoft | Microsoft Exchange Server 2019 | Cumulative Update 1 | — |