Rapid7 Vulnerability & Exploit Database

Microsoft Exchange: CVE-2017-8621: Microsoft Exchange Open Redirect Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft Exchange: CVE-2017-8621: Microsoft Exchange Open Redirect Vulnerability

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
07/11/2017
Created
10/04/2023
Added
08/10/2023
Modified
11/15/2023

Description

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability".

Solution(s)

  • microsoft-exchange-exchange_server_2016_CU5-kb4018588

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;