Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability."
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/shelly-cn/ExchangeCVESearch