description: A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
problem types: Spoofing
affected:
{
product: Microsoft Exchange Server 2019 Cumulative Update 4
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft Exchange Server 2016 Cumulative Update 15
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft Exchange Server 2019 Cumulative Update 3
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft Exchange Server 2016 Cumulative Update 14
vendor: Microsoft
versions:
status: affected, version: unspecified
}
