A vulnerability in Exchange Server has been patched by Microsoft. This vulnerability allowed threat actors to execute arbitrary JavaScript code in cross-site scripting attacks. The attacks targeted Outlook Web Access users, allowing for the execution of code through cross-site scripting. This patch addresses an actively exploited issue, indicating that the vulnerability was being used in actual attacks.

AI summaries can be wrong sometimes—always verify important details using the source article.