CVE-2015-1764

The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."

• http://www.securityfocus.com/bid/75007Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032528Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064
• http://www.securityfocus.com/bid/75007Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032528Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064

Published

Jun 10, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1758Untrusted search path vulnerability in the LoadLibrary funct…
• CVE-2015-1759Microsoft Office Compatibility Pack SP3 allows remote attack…
• CVE-2015-1760Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Of…
• CVE-2015-1761Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, …
• CVE-2015-1762Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, …
• CVE-2015-1763Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, …
• CVE-2015-1765Microsoft Internet Explorer 9 through 11 allows remote attac…
• CVE-2015-1766Microsoft Internet Explorer 6 through 11 allows remote attac…
• CVE-2015-1767Microsoft Internet Explorer 9 through 11 allows remote attac…
• CVE-2015-1768win32k.sys in the kernel-mode drivers in Microsoft Windows S…
• CVE-2015-1769Mount Manager in Microsoft Windows Vista SP2, Windows Server…6.6
• CVE-2015-1770Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote atta…8.8