CVE-2018-8159: XSS

Published May 9, 2018

Updated

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

Affected Software

4 affected components

Microsoft Exchange Server=2013-cumulative_update_19

Microsoft Exchange Server=2013-cumulative_update_20

Microsoft Exchange Server=2016-cumulative_update_8

Microsoft Exchange Server=2016-cumulative_update_9

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8159

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-8159?

CVE-2018-8159 has a severity rating of Important, indicating a significant risk of exploitation.

How do I fix CVE-2018-8159?

To fix CVE-2018-8159, apply the latest security updates provided by Microsoft for the affected versions of Exchange Server.

Which versions of Microsoft Exchange Server are affected by CVE-2018-8159?

CVE-2018-8159 affects Microsoft Exchange Server 2013 Cumulative Update 19 and 20, as well as 2016 Cumulative Update 8 and 9.

What type of vulnerability is CVE-2018-8159?

CVE-2018-8159 is classified as an elevation of privilege vulnerability.

Could CVE-2018-8159 allow attackers to compromise a system?

Yes, exploitation of CVE-2018-8159 could allow attackers to gain elevated permissions on the affected system.