Title

Multiple Vulnerabilities in Microsoft Exchange Server (MS15-026) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in Exchange Server. To exploit these vulnerabilities, the attacker would entice a user to click a specifically crafted URL or click a link in an email redirecting them to a targeted Outlook Web App. If successfully exploited, the attacker would gain the ability to elevate their privileges and compromise the system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-58991

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.