SecuritySpace - CVE-2015-1764

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-1764

Description: The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-1764
BugTraq ID: 75007
http://www.securityfocus.com/bid/75007
Microsoft Security Bulletin: MS15-064
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064
http://www.securitytracker.com/id/1032528

CVE ID:	CVE-2015-1764
Description:	The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1764 BugTraq ID: 75007 http://www.securityfocus.com/bid/75007 Microsoft Security Bulletin: MS15-064 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064 http://www.securitytracker.com/id/1032528