NVD

Id
59907  
Name
CVE-2006-1193  
Description
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-13  
Modified Date
2011-03-07  
Seq
2006-1193  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308265 59907 CVE-2006-1193 20060614 SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability  View
308266 59907 CVE-2006-1193 oval:org.mitre.oval:def:1070  View
308267 59907 CVE-2006-1193 oval:org.mitre.oval:def:1161  View
308268 59907 CVE-2006-1193 oval:org.mitre.oval:def:1315  View
308269 59907 CVE-2006-1193 1016280  View
308270 59907 CVE-2006-1193 VU#138188  View
308271 59907 CVE-2006-1193 MS06-029  View
308272 59907 CVE-2006-1193 http://www.sec-consult.com/fileadmin/Advisories/20060613-0_owa_xss_noexploit.txt  View
308273 59907 CVE-2006-1193 18381  View
308274 59907 CVE-2006-1193 TA06-164A  View
308275 59907 CVE-2006-1193 ADV-2006-2326  View
308276 59907 CVE-2006-1193 exchange-owa-xss(25550)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58136 JVNDB-2006-000332 Microsoft Exchange Server の OWA におけるスクリプトを挿入可能な脆弱性 Microsoft Exchange Server に実装されている Outlook Web Access (OWA) には、特定の電子メールを HTML 解析する際に、混入されたスクリプトを適切に除去しない脆弱性が存在します。 CVE-2006-1193 17295 CVE-2006-1193 59907 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000332.html 2006-06-13 2007-04-01 View