Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Epss exploitation probability 33.2% and no vendor patch available.
Code Injection
Denial Of Service
Microsoft
RCE
Exchange Server
NVD
CVSS 2.0
3.5
EPSS
33.2%