XSS in Microsoft Exchange Server
CVE-2003-0712
Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.174 (96.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Exchange_server — versions 5.5
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)
- cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2003-0712?
- CVE-2003-0712 is a vulnerability in Microsoft Exchange Server, classified under Cross-site Scripting. Published 2003-11-17.
- Is CVE-2003-0712 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.