Description
Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.
References
- MS04-026 vendor-advisory
- exchange-owa-execute-code(16583) vdb-entry
- VU#948750 third-party-advisory
- oval:org.mitre.oval:def:2016 vdb-entry signature