Vulnerability Details CVE-2005-0420
Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.717
EPSS Ranking 98.7%
CVSS Severity
CVSS v2 Score 5.8
References
- http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html
- http://secunia.com/advisories/14144
- http://www.securityfocus.com/bid/12459
- http://www.vupen.com/english/advisories/2005/0105
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19225
- http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html
- http://secunia.com/advisories/14144
- http://www.securityfocus.com/bid/12459
- http://www.vupen.com/english/advisories/2005/0105
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19225
Products affected by CVE-2005-0420
-
cpe:2.3:a:microsoft:exchange_server:2003