CVE-2005-2022: XSS

Published Jun 17, 2005

Updated

Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability.

Affected Software

2 affected components

Sun iPlanet Messaging Server=5.2

Sun iPlanet Messaging Server=6.2

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1

Event History

Jun 17, 2005

CVE Published

04:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2022?

CVE-2005-2022 is considered a high severity vulnerability due to the potential for remote code execution via arbitrary Javascript.

How do I fix CVE-2005-2022?

To fix CVE-2005-2022, apply the latest patches or updates provided for Sun iPlanet Messaging Server 5.2 and Sun ONE Messaging Server 6.2.

What are the affected versions for CVE-2005-2022?

CVE-2005-2022 affects iPlanet Messaging Server version 5.2 Patch 1 and Sun ONE Messaging Server version 6.2.

What type of vulnerability is CVE-2005-2022?

CVE-2005-2022 is classified as a cross-site scripting (XSS) vulnerability allowing the execution of arbitrary Javascript.

Can CVE-2005-2022 be exploited remotely?

Yes, CVE-2005-2022 can be exploited remotely by attackers to execute malicious scripts.