CVE-2018-8152

EUVD-2018-19823
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/104043
http://www.securitytracker.com/id/1040850
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8152
http://www.securityfocus.com/bid/104043
http://www.securitytracker.com/id/1040850
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8152