High severity8.1NVD Advisory· Published Dec 12, 2017· Updated May 13, 2026
CVE-2017-11932
CVE-2017-11932
Description
Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability".
Affected products
3cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*
- Microsoft Corporation/Microsoft Exchange Serverv5Range: Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11932nvdPatchVendor Advisory
- www.securityfocus.com/bid/102060nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039996nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.