Navigation section
owa
About this tag
OWA, or Outlook Web Access, is the web-based email client for Microsoft Exchange Server. Discussions on WindowsForum.com cover security vulnerabilities in OWA, including information disclosure risks from specially crafted image URLs and improper handling of web requests. Older advisories highlight session hijacking threats where an attacker could take over an authenticated OWA session. These threads focus on security updates and patches released by Microsoft to address such vulnerabilities, emphasizing the importance of keeping Exchange Server and OWA up to date to protect against potential exploits.
-
MS16-079 - Important: Security Update for Microsoft Exchange Server (3160339) - Version: 1.0
Severity Rating: Important Revision Note: V1.0 (June 14, 2016): Bulletin published. Summary: This security update resolves vulnerabilites in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in...- News
- Thread
- bulletin cybersecurity email security exchange server information disclosure information technology june microsoft ms16-079 network owa patch security server management threat mitigation update version 1.0 vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS15-103 - Important: Vulnerabilities in Microsoft Exchange Server Could Allow Information...
Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if Outlook Web Access (OWA) fails to properly...- News
- Thread
- email security exchange server extended security updates http requests information disclosure microsoft ms15-103 owa sanitize user input vulnerability
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2401593): Vulnerability in Outlook Web Access Could Allow Elevation of
Revision Note: V1.0 (September 14, 2010): Advisory published.Summary: Microsoft has completed the investigation of a publicly disclosed vulnerability in Outlook Web Access (OWA) that may affect Microsoft Exchange customers. An attacker who successfully exploited this vulnerability could hijack...- News
- Thread
- advisory attacker authentication customer impact email security exchange investigation microsoft october outlook owa risk security session hijacking vulnerability web access
- Replies: 0
- Forum: Security Alerts