CVE-2003-0712: Microsoft Exchange Server

Medium severity, CVSS 4.3. EPSS: 19.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.

Affected products

• Microsoft Exchange Server: version 5.5 only

Published 2003-11-17. Last modified 2026-06-16.