{
  "cveId": "CVE-2018-0941",
  "url": "https://patchblox.com/security/cve/CVE-2018-0941",
  "summary": "CVE-2018-0941 is fixed in 2 products on 1 platform, first by KB4073392, released March 13, 2018. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Microsoft Exchange Information Disclosure Vulnerability",
  "description": "\u003Cp\u003EAn information disclosure vulnerability exists in the way that Microsoft Exchange Server handles importing data. If an impacted user is using Microsoft Exchange Outlook Web Access (OWA), the vulnerability could allow an attacker to discover sensitive information that should otherwise not be disclosed.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an attacker would have to upload a specially crafted file to Microsoft Exchange Outlook Web Access (OWA).\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how Microsoft Exchange handles importing data.\u003C/p\u003E",
  "published": "2018-03-13T07:00:00Z",
  "severity": "Important",
  "epss": 0.12458,
  "epssPercentile": 0.9624,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Unlikely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-0941",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft Exchange Server 2016 Cumulative Update 7",
      "fixedVersion": "",
      "fix": "KB4073392",
      "url": "https://patchblox.com/security/fix/microsoft/kb4073392",
      "released": "2018-03-13T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
      "fixedVersion": "",
      "fix": "KB4073392",
      "url": "https://patchblox.com/security/fix/microsoft/kb4073392",
      "released": "2018-03-13T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}