All Detections

Suspicious OWA XSS Pattern (CVE-2026-42897)

avatar
Ethan Andrews@eandrews
updated May 20, 202690485

Detects unusual JavaScript-related URI query parameters in Exchange IIS logs accessing the OWA directory. This may indicate attempted exploitation of the CVE-2026-42897 XSS vulnerability.

Microsoft Sentinel (KQL)