CVE-2017-0110

State: Published
Severity: Not scored
Published: Mar 17, 2017
Updated: Aug 5, 2024
Reserved: Sep 9, 2016

Description

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Exchange ServerMicrosoft Corporation	Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server Cumulative Update 14, and Microsoft Exchange Server 2016 Cumulative Update 3Affected

References

96621vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0110
1038011vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.