Microsoft Office Online Server open to SSRF-to-RCE exploit

Behavior functioning as intended, Microsoft reportedly says, and offers mitigation advice instead

Microsoft Office Online Server open to SSRF-to-RCE exploit

Microsoft Exchange servers are getting hacked via ProxyShell exploits

Operation Exchange Marauder: Active Exploitation of Multiple Zero-Day Microsoft Exchange Vulnerabilities

Beginner Guide To Exploit Server Side Request Forgery (SSRF) Vulnerability, by Muh. Fani Akbar

Attackers Exploit New Zero-Day ProxyNotShell Vulnerabilities on Exchange Server

Zero-Day Vulnerabilities in Microsoft Exchange: A Deep Dive

The Mechanics of The APT Attack on Microsoft Exchange

Zero Day Initiative — Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments

Researchers Release Details of New RCE Exploit Chain for SharePoint