CVE-2015-1764

The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP…

published June 10, 2015

CVSS

—

EPSS

13%

Percentile

96.4

In the wild

Unconfirmed

What it is

The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13467 · 96.4th percentile
Published: 2015-06-10T01:00Z

EPSS history

Timeline

10 JUN 01:00Z
The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP…
cvelistv5