All vulnerabilities

Servers and applications

CVE-2020-16969

<p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user.</p> <p>To exploit the vulnerability, an attacker could include specially crafted OWA messages that could be loaded, without warning or filtering, from the…

Severity
High 7.1
Published
16 Oct 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
  • Version 2013-cumulative_update_23
  • Version 2016-cumulative_update_17
  • Version 2016-cumulative_update_18
  • Version 2019-cumulative_update_6
  • Version 2019-cumulative_update_7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-16969
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-16969