CVE-2004-0203

The record

Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

Affected packages

Related vulnerabilities

• CVE-2026-56858 Previously, pathological inputs could close an unescaped '/' early, allowing for… CWE-79
• CVE-2026-73650 SVGO, short for SVG Optimizer, is a Node.js library and command-line application for… CWE-79
• CVE-2026-73648 rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. CWE-79
• CVE-2026-73490 Loofah is a general library for manipulating and transforming HTML/XML documents and… CWE-79
• CVE-2026-71497 jsoup is a Java library for working with real-world HTML. CWE-79
• CVE-2026-69149 Angular is a development platform for building mobile and desktop web applications using… CWE-79
• CVE-2026-69151 Angular is a development platform for building mobile and desktop web applications using… CWE-79
• CVE-2026-48060 Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. CWE-79