CVE-2014-6326 in Exchange Server

Sumário (Inglês)

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

11/09/2014

Divulgação

10/12/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
73200	Microsoft Exchange Server Script de Site Cruzado	79	Não definido	Correção oficial	CVE-2014-6326

Fontes

• MITRE
• NVD
• CVE Details