CVE-2018-8448

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
microsoftCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/105492
http://www.securitytracker.com/id/1041836
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8448
http://www.securityfocus.com/bid/105492
http://www.securitytracker.com/id/1041836
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8448