Definition

MS Exchange Server Cross-site Scripting Vulnerability

oval:org.mitre.oval:def:2016

Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

Family:

windows

Status:

ACCEPTED

Platform(s):

Microsoft Windows NT

Class:

vulnerability

Reference(s):

CVE-2004-0203

Product(s):

Outlook Web Access