CVE-2003-0712
medium · 4.3Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.
4.3
CVSS
19.9%
EPSS (exploit prob.)
97th
EPSS percentile
2003-11-17
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | exchange_server | 5.5 |
| microsoft | exchange_server | 5.5 |
| microsoft | exchange_server | 5.5 |
| microsoft | exchange_server | 5.5 |
| microsoft | exchange_server | 5.5 |
Check a specific version with /api/v1/cve/match.
References
- http://marc.info/?l=bugtraq&m=106631918405915&w=2
- http://www.cert.org/advisories/CA-2003-27.html
- http://www.kb.cert.org/vuls/id/435444
- http://www.securityfocus.com/bid/8832
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-047
- http://marc.info/?l=bugtraq&m=106631918405915&w=2
- http://www.cert.org/advisories/CA-2003-27.html
- http://www.kb.cert.org/vuls/id/435444
- http://www.securityfocus.com/bid/8832
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-047
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2003-0712