CVE-2018-16793

Severity: high (CVSS 8.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-09-21 · updated 2026-06-17
Weakness: CWE-918

Description

Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page.

Affected products

Microsoft Exchange Server: 2010-sp3_rollup1, 2010-sp3_rollup10, 2010-sp3_rollup11, 2010-sp3_rollup12, 2010-sp3_rollup13, 2010-sp3_rollup14 (+12)

References

http://packetstormsecurity.com/files/149411/Rollup-18-For-Microsoft-Exchange-Server-2010-SP3-Server-Side-Request-Forgery.html
http://seclists.org/fulldisclosure/2018/Sep/20
http://www.securityfocus.com/bid/105386
https://seclists.org/bugtraq/2018/Sep/38
http://packetstormsecurity.com/files/149411/Rollup-18-For-Microsoft-Exchange-Server-2010-SP3-Server-Side-Request-Forgery.html
http://seclists.org/fulldisclosure/2018/Sep/20
http://www.securityfocus.com/bid/105386
https://seclists.org/bugtraq/2018/Sep/38

Get alerted when CVE-2018-16793 or the next vulnerability affects your stack