CVE-2001-0340: Microsoft Exchange Server

High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days.

An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.

Affected products

• Microsoft Exchange Server: version 5.5 only; version 2000 only

Published 2001-07-21. Last modified 2026-06-16.