Signature Detail
Short Name |
HTTP:XSS:MS-OWA-MUTIPLE |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Exchange OWA Multiple Cross-Site Scripting |
Release Date |
2014/11/10 |
Update Number |
2449 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Exchange OWA Multiple Cross-Site Scripting
This signature detects attempts to exploit a known vulnerability in Microsoft Exchange Outlook Web Access (OWA). An attacker can send a malformed e-mail, which if accessed by a victim using OWA, causes the affected system to run a malicious script in the context of the user's session.
References
- CVE: CVE-2014-6326
- CVE: CVE-2014-6325