← Database

CVE-2004-0203

MEDIUM CVSS: 4.3 Published: 2004-11-23 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

Affected Platforms

Microsoft Exchange Server

Weakness Type

CWE-79

References