Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to redirect users to arbitrary web sites and spoof the origin of e-mail messages via unspecified vectors, aka "Exchange URL Redirection Vulnerability."
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: microsoft
Published: 2014-12-11T00:00:00
Updated: 2024-08-06T12:10:13.299Z
Reserved: 2014-09-11T00:00:00
Link: CVE-2014-6336
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-12-11T00:59:07.597
Modified: 2018-10-12T22:07:38.207
Link: CVE-2014-6336
Redhat
No data.