CVE-2003-0712

Опубликовано: 17 нояб. 2003

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.

Ссылки

http://marc.info/?l=bugtraq&m=106631918405915&w=2
Mailing List
Third Party Advisory
http://www.cert.org/advisories/CA-2003-27.html
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/435444
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/8832
Patch
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-047
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=106631918405915&w=2
Mailing List
Third Party Advisory
http://www.cert.org/advisories/CA-2003-27.html
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/435444
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/8832
Patch
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-047
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.18968

Средний

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-p3q6-4jc8-9mh2

github

почти 4 года назад