virus logo Intrusion Prevention

MS.Exchange.Server.Outlook.Web.Access.HTML.Injection

description-logoDescription

This indicates a possible attempt to exploit a cross-site scripting (XSS) vulnerability in the Microsoft Outlook Web Access (OWA) component in Exchange Server.
The vulnerability is caused by the application's failure to properly validate user-supplied input. Remote attackers may exploit this to inject arbitrary web script or HTML via a crafted email message.

affected-products-logoAffected Products

Microsoft Exchange Server 5.5 SP4

Impact logoImpact

System compromise

recomended-action-logoRecommended Actions

Microsoft has released a critical security update, MS05-029, to fix this vulnerability. Please apply the update.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 11756
Created Mar 14, 2006
Updated Jan 13, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2005-0563
Exploit Prediction Score 96.97%
Default Action drop
Active
Affected OS Windows
Affected App MS_Exchange