CVE-2003-0712 in Exchange
Summary
Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
09/02/2003
Disclosure
11/17/2003
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 334 | Microsoft Exchange Outlook Web Access cross site scripting | 80 | Not defined | Official fix | CVE-2003-0712 |