description: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858.
problem types: Spoofing
affected:
{
product: Microsoft Exchange Server
vendor: Microsoft
versions:
status: affected, version: 2010 Service Pack 3
status: affected, version: 2019
}
{
product: Microsoft Exchange Server 2016
vendor: Microsoft
versions:
status: affected, version: Cumulative Update 11
status: affected, version: Cumulative Update 12
}
{
product: Microsoft Exchange Server 2013
vendor: Microsoft
versions:
status: affected, version: Cumulative Update 22
}
{
product: Microsoft Exchange Server 2019
vendor: Microsoft
versions:
status: affected, version: Cumulative Update 1
}
