CVE-2014-6325: XSS

Published Dec 11, 2014

Updated

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326.

Affected Software

2 affected components

Microsoft Exchange Server=2013-cumulative_update_6

Microsoft Exchange Server=2013-sp1

Event History

Dec 11, 2014

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6325?

CVE-2014-6325 has a critical severity rating due to its potential impact on sensitive user data.

How do I fix CVE-2014-6325?

To fix CVE-2014-6325, apply the security updates provided by Microsoft for Exchange Server 2013 SP1 and Cumulative Update 6.

Who is affected by CVE-2014-6325?

CVE-2014-6325 affects users of Microsoft Exchange Server 2013 SP1 and Cumulative Update 6.

What type of vulnerability is CVE-2014-6325?

CVE-2014-6325 is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject malicious scripts.

Can CVE-2014-6325 be exploited remotely?

Yes, CVE-2014-6325 can be exploited remotely through crafted URLs targeting affected Exchange Server installations.