Soaj1664Ashar

A inicialização insegura de variáveis padrão permite que um invasor remoto não autorizado ignore um recurso de segurança, especificamente a autenticação, através de uma rede.

The issue arises from the way Microsoft Exchange Outlook Web Access (OWA) handles web requests, allowing an elevation of privilege. This could lead to script or content injection attacks, where an attacker might trick a user into disclosing sensitive information by clicking a maliciously crafted link.

An elevation of privilege issue exists due to Microsoft SharePoint software's failure to properly sanitize specially crafted requests. This issue is related to a cross-site scripting (XSS) vulnerability.

The issue allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request.