CVE-2006-1193

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."

CVSS v2.0

2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

39.17% chance of exploitation in the next 30 days, 98th percentile

Published

2006-06-13

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28005

References

• CVE Record
• NVD entry

Related

• CVE-2006-1192
• CVE-2006-1194
• CVE-2006-1191
• CVE-2006-1196
• CVE-2006-1190
• CVE-2006-1199