CVE Database
/

CVE-2015-1764

Back to search

CVE-2015-1764

Published: Jun 10, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

MS15-064
vendor-advisory
x_refsource_MS
75007
vdb-entry
x_refsource_BID
1032528
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now