CVE-2017-8621

MEDIUM

Microsoft Exchange Server - Open Redirect

Title source: rule

Description

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability".

References (3)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/99533

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038852

[Patch, Vendor Advisory] https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8621

Scores

CVSS v3 6.1

EPSS 0.0106

EPSS Percentile 77.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (5)

microsoft/exchange_server

Microsoft Corporation/Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5. < Microsoft Exchange

Published Jul 11, 2017

Tracked Since Feb 18, 2026