CVE-2004-0203: XSS

Published Aug 12, 2004

Updated

Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

Affected Software

5 affected components

Microsoft Exchange Server=5.5-sp1

Microsoft Exchange Server=5.5-sp4

Microsoft Exchange Server=5.5-sp2

Microsoft Exchange Server=5.5-sp3

Microsoft Exchange Server=5.5

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026

Event History

Aug 12, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0203?

CVE-2004-0203 is classified as a critical vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2004-0203?

To fix CVE-2004-0203, ensure that you have applied the latest patches or upgrades to Microsoft Exchange Server 5.5.

What systems are affected by CVE-2004-0203?

CVE-2004-0203 affects Microsoft Exchange Server 5.5 across various service packs including SP1, SP2, SP3, and SP4.

Can CVE-2004-0203 be exploited remotely?

Yes, CVE-2004-0203 can be exploited remotely by attackers to inject malicious scripts through HTML emails.

What are the potential impacts of CVE-2004-0203?

The impacts of CVE-2004-0203 include the ability for attackers to spoof content and compromise user information through XSS vulnerabilities.