Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Exchange Server OWA 脚本注入漏洞
Vulnerability Description
Microsoft Exchange Server是一款流行的邮件服务器。 Exchange Server在处理邮件中的脚本存在漏洞,导致脚本代码在用户机器上非授权执行。 运行Outlook Web Access (OWA)的Exchange Server在某些情况下没有正确的过滤邮件中的脚本,导致脚本注入漏洞。攻击者可以通过创建有特制脚本的邮件消息来利用这个漏洞。如果运行了特制脚本的话,就会在客户端以用户的安全环境执行。利用这个漏洞需要用户交互。
CVSS Information
N/A
Vulnerability Type
N/A