← All CVEs

CVE-2015-2505

medium · 5

Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to obtain sensitive stacktrace information via a crafted request, aka "Exchange Information Disclosure Vulnerability."

5
CVSS
18.2%
EPSS (exploit prob.)
97th
EPSS percentile
2015-09-09
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

VendorProductAffected versions
microsoftexchange_server2013
microsoftexchange_server2013
microsoftexchange_server2013

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-2505