Microsoft Outlook Web Access vulnerabilities
2 vulnerabilities
Known vulnerabilities in Microsoft Outlook Web Access, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2005-1052microsoftoutlook+1
EPSS score9.38%
Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.CVE-2010-3213microsoftoutlook_web_accessEPSS score8.38%
Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.