CVE-2004-0203

Exchange Server 5.5 SP4 - Cross-Site Scripting via HTML Redirect Query

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

References (4)

Core 4
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16583
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/948750

Scores

EPSS 0.2098
EPSS Percentile 97.3%

Details

CWE
CWE-79
Status published
Products (1)
microsoft/exchange_server 5.5 (5 CPE variants)
Published Nov 23, 2004
Tracked Since Feb 18, 2026