PT-2003-1812
CVE-2003-0712
·
Published
2003-10-17
·
Updated
2020-04-09
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
Microsoft Exchange Server 5.5 Outlook Web Access (OWA)
Description:
A cross-site scripting (XSS) issue exists in the HTML encoding for the Compose New Message form, allowing remote attackers to execute arbitrary web script.
Recommendations:
For Microsoft Exchange Server 5.5 Outlook Web Access (OWA), consider disabling the Compose New Message form until a fix is available to prevent potential exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾