CVE-2001-0726 — Microsoft Exchange Server vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
9.9%
top 6.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Exchange Server
Timeline
PublishedDec 6
Latest updateApr 30

Description

Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5qjv-rqph-2fm2: Outlook Web Access (OWA) in Microsoft Exchange 5↗2022-04-30
▶
CVEList
CVE-2001-0726: Outlook Web Access (OWA) in Microsoft Exchange 5↗2002-06-25
▶
CVE-2001-0726 — Microsoft Exchange Server vulnerability | cvebase