The remote Microsoft Exchange server is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists Outlook     Web Access (OWA) due to improper handling of web     requests. An unauthenticated, remote attacker can     exploit this, via a specially crafted web application     request, to see the contents of a stacktrace.
    (CVE-2015-2505)

  - Multiple spoofing vulnerabilities exist in Outlook Web     Access (OWA) due to improper sanitization of specially     crafted email. An unauthenticated, remote attacker can     exploit these vulnerabilities by convincing a user to     visit a malicious website, resulting in the disclosure     of sensitive information. (CVE-2015-2543, CVE-2015-2544)

MS15-103: Vulnerabilities in Microsoft Exchange Server Could Allow Information Disclosure (3089250)

medium Nessus Plugin ID 85883

No changelogs found