CVE-2016-3379: XSS
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, aka "Microsoft Exchange Elevation of Privilege Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3379?
CVE-2016-3379 is rated as important severity as it allows remote attackers to exploit a cross-site scripting vulnerability.
How do I fix CVE-2016-3379?
To remediate CVE-2016-3379, it is recommended to apply the latest cumulative updates for Microsoft Exchange Server.
Which versions of Microsoft Exchange Server are affected by CVE-2016-3379?
CVE-2016-3379 affects Microsoft Exchange Server 2016 Cumulative Update 1 and Cumulative Update 2.
What type of vulnerability is CVE-2016-3379?
CVE-2016-3379 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.
Can CVE-2016-3379 lead to privilege escalation?
Yes, CVE-2016-3379 is categorized as an elevation of privilege vulnerability that could allow unauthorized access.