CVE-2019-0858: XSS

Published Apr 9, 2019

Updated

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0817.

Affected Software

5 affected components

Microsoft Exchange Server=2013-cumulative_update_22

Microsoft Exchange Server=2016-cumulative_update_11

Microsoft Exchange Server=2016-cumulative_update_12

Microsoft Exchange Server=2019

Microsoft Exchange Server=2019-cumulative_update_1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0858

Event History

Apr 9, 2019

CVE Published

via MITRE·08:19 PM

Data Sourced

via MITRE·08:19 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0858?

CVE-2019-0858 has a severity rating of important, indicating it poses a moderate risk to systems.

How do I fix CVE-2019-0858?

To fix CVE-2019-0858, apply the latest cumulative update for your version of Microsoft Exchange Server.

What versions of Microsoft Exchange Server are affected by CVE-2019-0858?

CVE-2019-0858 affects Microsoft Exchange Server 2013, 2016, and 2019 on specific cumulative updates.

What causes CVE-2019-0858 vulnerability?

CVE-2019-0858 is caused by improper handling of web requests in Outlook Web Access (OWA) on Microsoft Exchange Server.

Is CVE-2019-0858 a common vulnerability?

CVE-2019-0858 has been noted as a specific high-impact vulnerability that can potentially lead to spoofing attacks.