CVE-2019-1266
No fix known EPSS 2%
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.
Products: Microsoft Exchange Server 2016, Microsoft Exchange Server 2019