CVEvulnerability
CVE-2003-0712
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.
Affected configurations
• microsoft exchange server 5.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=106631918405915&w=2 Mailing List, Third Party Advisory
- http://www.cert.org/advisories/CA-2003-27.html Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/435444 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/8832 Patch, Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-047 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=106631918405915&w=2 Mailing List, Third Party Advisory
- http://www.cert.org/advisories/CA-2003-27.html Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/435444 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/8832 Patch, Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-047 Patch, Vendor Advisory