CVE-2005-0563

Published Jun 14, 2005 CVSS 2.0 · 4.3 Medium EPSS 14.2% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("jav&#X41sc
ript:") in an IMG tag.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics epss

{'score': 0.32049}

epss

{'score': 0.22959}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Aug 7, 2024, 9:21 PM
Reserved
Feb 26, 2005, 12:00 AM
Status
Modified
Published
Jun 14, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:11 PM