← Database

CVE-2006-1193

LOW CVSS: 2.6 Published: 2006-06-13 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."

Affected Platforms

Microsoft Exchange Server

Weakness Type

CWE-79

References