Title

Multiple Vulnerabilities in Microsoft Exchange Server (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in Microsoft Exchange Server. To exploit these vulnerabilities, an attacker would entice a user to open a malicious URL on a hosted website or sent via email. If successfully exploited, these vulnerabilities would allow an attacker to read content they are not authorized to read, change the user's permissions, inject malicious content in the browser, or execute arbitrary code and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-42592

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.