CVEvulnerability
CVE-2005-0563
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-06-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("javAsc
ript:") in an IMG tag.
Affected configurations
• microsoft exchange server 5.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
Referenced by CWE · observed example (1)
- CWE-84 Improper Neutralization of Encoded URI Schemes in a Web Page weakness
References
- http://secunia.com/advisories/15697 Third Party Advisory
- http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities Patch, Third Party Advisory
- http://www.securityfocus.com/bid/13952 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029 Patch, Vendor Advisory
- http://secunia.com/advisories/15697 Third Party Advisory
- http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities Patch, Third Party Advisory
- http://www.securityfocus.com/bid/13952 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029 Patch, Vendor Advisory