Vulnerability in Microsoft Exchange Server
CVE-2014-6319
Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka "Outlook Web App Token Spoofing Vulnerability."
EPSS: 0.097 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Exchange_server — versions 2007, 2010, 2013
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)