CVE-2005-0420: Microsoft Exchange Server

Medium severity, CVSS 5.8. EPSS: 25.6% chance of exploitation in the next 30 days.

Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

Affected products

Published 2005-04-27. Last modified 2026-06-16.