CVE-2019-1266: XSS
Published Sep 11, 2019
·Updated
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.
Affected Software
4 affected components
Microsoft Exchange Server=2016-cumulative_update_12
Microsoft Exchange Server=2016-cumulative_update_13
Microsoft Exchange Server=2019-cumulative_update_1
Microsoft Exchange Server=2019-cumulative_update_2
Remediation
Event History
Sep 11, 2019
CVE Published
via MITRE·09:24 PM
Data Sourced
via MITRE·09:24 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-1266?
CVE-2019-1266 is rated as important as it can lead to spoofing attacks in Microsoft Exchange Server.
2
How do I fix CVE-2019-1266?
To fix CVE-2019-1266, ensure that your Microsoft Exchange Server is updated with the latest cumulative updates.
3
Which versions of Microsoft Exchange Server are affected by CVE-2019-1266?
CVE-2019-1266 affects Microsoft Exchange Server 2016 Cumulative Update 12 and 13, and 2019 Cumulative Update 1 and 2.
4
What impact does CVE-2019-1266 have on users?
CVE-2019-1266 can allow an attacker to spoof sent messages, potentially misleading users.
5
Is there any workaround for CVE-2019-1266?
Currently, the only recommended solution for CVE-2019-1266 is applying the security updates provided by Microsoft.