CVE-2015-1629: XSS
Published Mar 11, 2015
·Updated
Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "ExchangeDLP Cross Site Scripting Vulnerability."
Affected Software
2 affected components
Microsoft Exchange Server=2013-cumulative_update_7
Microsoft Exchange Server=2013-sp1
Event History
Mar 11, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1629?
CVE-2015-1629 is rated as a medium severity vulnerability.
2
How do I fix CVE-2015-1629?
To fix CVE-2015-1629, you should apply the latest cumulative update or security patches provided by Microsoft for Exchange Server.
3
What software versions are affected by CVE-2015-1629?
CVE-2015-1629 affects Microsoft Exchange Server 2013 SP1 and Cumulative Update 7.
4
What type of vulnerability is CVE-2015-1629?
CVE-2015-1629 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2015-1629 be exploited remotely?
Yes, CVE-2015-1629 can be exploited remotely by attackers through crafted URLs.