Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability".
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/shelly-cn/ExchangeCVESearch