CVE-2018-8159
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2018
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft Exchange Server
- Vendor
- Microsoft
- Product
- Microsoft Exchange Server
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2013 Cumulative Update 19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2013 Cumulative Update 20 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2016 Cumulative Update 8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2016 Cumulative Update 9 | affected | Unavailable | Unavailable | Unavailable | None listed |