Medium severity6.1NVD Advisory· Published Mar 17, 2017· Updated Jun 17, 2026
CVE-2017-0110
CVE-2017-0110
Description
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."
Affected products
6cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_14:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_14:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*
- (no CPE)
- Microsoft Corporation/Exchange Serverv5Range: Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server Cumulative Update 14, and Microsoft Exchange Server 2016 Cumulative Update 3
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0110nvdPatchVendor Advisory
- www.securityfocus.com/bid/96621nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038011nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.