CVE-2017-8758: XSS
Published Sep 13, 2017
·Updated
Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability."
Affected Software
1 affected component
Microsoft Exchange Server=2016
Remediation
Event History
Sep 13, 2017
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-8758?
CVE-2017-8758 is rated as a medium severity vulnerability due to its potential for elevation of privilege.
2
How do I fix CVE-2017-8758?
To fix CVE-2017-8758, apply the security updates provided by Microsoft for Exchange Server 2016.
3
Which versions of Microsoft Exchange are affected by CVE-2017-8758?
CVE-2017-8758 specifically affects Microsoft Exchange Server 2016.
4
What impact does CVE-2017-8758 have?
CVE-2017-8758 allows an attacker to perform cross-site scripting, potentially leading to elevation of privilege.
5
Is CVE-2017-8758 a critical vulnerability?
CVE-2017-8758 is not classified as critical, but it still poses risks that should be addressed promptly.