← Database

CVE-2005-0420

MEDIUM CVSS: 5.8 Published: 2005-04-27 Modified: 2026-06-16

Description

Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

Affected Platforms

Microsoft Exchange Server

Weakness Type

CWE-601

References