Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-1266

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.

Description

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Exchange Server 2016

  • Cumulative Update 12affected
  • Cumulative Update 13affected

Microsoft Microsoft Exchange Server 2019

  • Cumulative Update 1affected
  • Cumulative Update 2affected

References