CVE-2004-2765: XSS
Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2765?
CVE-2004-2765 is classified as a medium-severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2004-2765?
To mitigate CVE-2004-2765, upgrade to the latest patched version of Sun ONE Messaging Server or iPlanet Messaging Server.
What versions are affected by CVE-2004-2765?
CVE-2004-2765 affects Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before version 5.2hf2.02.
What systems are at risk due to CVE-2004-2765?
Systems running affected versions of Sun ONE Messaging Server or iPlanet Messaging Server are at risk due to CVE-2004-2765.
What type of attack does CVE-2004-2765 facilitate?
CVE-2004-2765 facilitates cross-site scripting (XSS) attacks through crafted email messages.