CVE-2014-6325 in Exchange Server

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2014-09-11

Divulgación

2014-12-10

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
73199	Microsoft Exchange Server secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2014-6325

Fuentes

• MITRE
• NVD
• CVE Details