CVE Database
/

CVE-2020-0903

Back to search

CVE-2020-0903

Published: Mar 12, 2020

Modified: Feb 28, 2025

PUBLISHED

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.

VendorProductVersions

Microsoft

Microsoft Exchange Server 2019 Cumulative Update 4

affected
unspecified

Microsoft

Microsoft Exchange Server 2016 Cumulative Update 15

affected
unspecified

Microsoft

Microsoft Exchange Server 2019 Cumulative Update 3

affected
unspecified

Microsoft

Microsoft Exchange Server 2016 Cumulative Update 14

affected
unspecified

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now