CVE-2012-4791: Microsoft Exchange Server

Low severity, CVSS 3.5. EPSS: 13.4% chance of exploitation in the next 30 days.

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."

Affected products

• Microsoft Exchange Server: version 2007 only; version 2010 only

Published 2012-12-12. Last modified 2026-06-16.