Microsoft Outlook Web Access — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Outlook Web Access, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2010-3213 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to…
• CVE-2016-0028 — CVSS 5.5 (medium): Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative…
• CVE-2005-1052 — CVSS 5.0 (medium): Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail…
• CVE-2008-2248 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject…
• CVE-2008-2143 — CVSS 1.9 (low): Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might…