[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9mSm7sC8OaZos31bOLZdAcW9Cex29opdZ4G1xFh1_f8":3,"g5a-ex:microsoft\u002Foutlook_web_access@*":83,"g5a-family:microsoft\u002Foutlook_web_access":85},{"success":4,"data":5},true,{"product":6,"versions":23,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":60,"seoMetadata":61,"meta":80},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":22},"microsoft","outlook_web_access",3,5,0,"2016-06-16",[14,18,20],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2003",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"2007",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"2016","Outlook Web Access by Microsoft is a technology product with 3 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[24,25,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},[28,36,42,47,53],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":35},"CVE-2008-2248","Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247.","2008-07-08",4.3,"v2","Medium",0.24611,{"cveId":37,"description":38,"publishedDate":12,"cvssScore":39,"cvssVersion":40,"severity":34,"isKev":17,"epssScore":41},"CVE-2016-0028","Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, aka \"Microsoft Exchange Information Disclosure Vulnerability.\"",5.5,"v3.0",0.22554,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":10,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":46},"CVE-2005-1052","Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.","2005-05-02",0.09375,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":52},"CVE-2010-3213","Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa\u002Fev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.","2010-09-07",6.8,0.08379,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":33,"severity":58,"isKev":17,"epssScore":59},"CVE-2008-2143","Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information.","2008-05-12",1.9,"Low",0.01545,[],{"title":62,"metaDescription":63,"keywords":64,"structuredData":65},"Outlook Web Access by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Outlook Web Access by Microsoft covering 3 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Outlook Web Access vulnerabilities, Outlook Web Access security, Outlook Web Access CVE, Microsoft Outlook Web Access, Outlook Web Access threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":66,"@type":67,"name":68,"description":63,"url":69,"manufacturer":70,"applicationCategory":74,"softwareVersion":75,"mainEntity":76},"https:\u002F\u002Fschema.org","SoftwareApplication","Outlook Web Access","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Foutlook_web_access",{"@type":71,"name":72,"url":73},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","3 versions tracked",{"@type":77,"name":78,"description":79,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Outlook Web Access Security Vulnerabilities","Security vulnerabilities affecting Outlook Web Access by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":81,"apiVersion":82},"2026-10-18T15:01:12.697Z","3.0",{"rows":84,"total":11,"capped":17,"failed":11},[],[]]