OW
Product
Outlook Web Access
5
CVEs
0
On KEV
5.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Outlook Web Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0028 | 5.5 | Jun 16 | Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict… Affected: All versions, or not specified |
| CVE-2010-3213 | – | Sep 7 | Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users… Affected: 2007; 2007; 2007 |
| CVE-2008-2248 | – | Jul 8 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: All versions, or not specified |
| CVE-2008-2143 | – | May 12 | Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616… Affected: All versions, or not specified |
| CVE-2005-1052 | – | May 2 | Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote… Affected: 2003 |
Showing 5