CVE-2005-0563
medium · 4.3Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("javAsc
ript:") in an IMG tag.
4.3
CVSS
14.2%
EPSS (exploit prob.)
96th
EPSS percentile
2005-06-14
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | exchange_server | 5.5 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/15697
- http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities
- http://www.securityfocus.com/bid/13952
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029
- http://secunia.com/advisories/15697
- http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities
- http://www.securityfocus.com/bid/13952
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-0563