← Database

CVE-2005-0563

MEDIUM CVSS: 4.3 Published: 2005-06-14 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("javAsc ript:") in an IMG tag.

Affected Platforms

Microsoft Exchange Server

Weakness Type

CWE-79

References