Intrusion PreventionMS.Exchange.Server.HandleBackEndCalculationException.XSS
Description
This indicates an attack attempt to exploit a Cross-Site Scripting Vulnerability in Microsoft Exchange Server.
The vulnerability is due to insufficient sanitization of incoming request parameters reflected in exception messages returned by the server. A remote attacker can exploit this vulnerability by enticing a target user into clicking a malicious link. Successful exploitation could result in arbitrary script execution in the target user's browser.
Affected Products
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2016 Cumulative Update 21
Microsoft Exchange Server 2016 Cumulative Update 22
Microsoft Exchange Server 2019 Cumulative Update 10
Microsoft Exchange Server 2019 Cumulative Update 11
Impact
System Compromise: Remote attackers can execute arbitrary script code in the context of the affected application.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-41349
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 50976 |
| Created | Dec 02, 2021 |
| Updated | Mar 31, 2022 |
| Risk |
|
| CVE ID | CVE-2021-41349 |
| Exploit Prediction Score | 96.17% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Exchange |