CVE-2017-0110

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."

• CWE-79

• http://www.securityfocus.com/bid/96621Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038011Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0110Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96621Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038011Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0110Patch, Vendor Advisory

Published

Mar 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0104The iSNS Server service in Microsoft Windows Server 2008 SP2…
• CVE-2017-0105Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Wor…
• CVE-2017-0106Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Micros…
• CVE-2017-0107Microsoft SharePoint Server fails to sanitize crafted web re…
• CVE-2017-0108The Windows Graphics Component in Microsoft Office 2007 SP3;…
• CVE-2017-0109Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 …
• CVE-2017-0111Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0112Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0113Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0114Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0115Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0116Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…