CVE-2004-1512: SOFT3304 04webserver

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.

Affected products

• SOFT3304 04webserver: version 1.42 only

Published 2004-12-31. Last modified 2026-06-16.