CVEvulnerability
CVE-2017-8621
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-07-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-601
Description
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability".
Affected configurations
• microsoft exchange server 2010
• microsoft exchange server 2013
• microsoft exchange server 2016
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- http://www.securityfocus.com/bid/99533 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038852 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8621 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/99533 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038852 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8621 Patch, Vendor Advisory