XSS in Microsoft Exchange Server

CVE-2014-6326

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.087 (94.6th percentile) — read the EPSS interpretation.