CVE-2001-0726

Опубликовано: 06 дек. 2001

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

Ссылки

http://www.osvdb.org/5557
Broken Link
http://www.securityfocus.com/bid/3650
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7663
Third Party Advisory
VDB Entry
http://www.osvdb.org/5557
Broken Link
http://www.securityfocus.com/bid/3650
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7663
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09905

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-5qjv-rqph-2fm2

github

больше 3 лет назад