CVE-2005-0563: Microsoft Exchange Server

Medium severity, CVSS 4.3. EPSS: 14.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("jav&#X41sc
ript:") in an IMG tag.

Affected products

• Microsoft Exchange Server: version 5.5 only

Published 2005-06-14. Last modified 2026-06-16.