ID:7222 - Exploit for Spoofing attack in Microsoft Exchange Server - CVE-2021-41349

 
Main Vulnerability Database Exploits ID:7222 - Exploit for Spoofing attack in Microsoft Exchange Server - CVE-2021-41349

ID:7222 - Exploit for Spoofing attack in Microsoft Exchange Server - CVE-2021-41349

Published: January 6, 2022


Vulnerability identifier: #VU58068
Vulnerability risk: Medium
CVE-ID: CVE-2021-41349
CWE-ID: CWE-451
Exploitation vector: Remote access
Vulnerable software:
Microsoft Exchange Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data in Microsoft Exchange Server. A remote attacker can spoof page content.


Remediation

Install updates from vendor's website.