CVE-2006-1193: Microsoft Exchange Server

Low severity, CVSS 2.6. EPSS: 39.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."

Affected products

• Microsoft Exchange Server: version 2000 only

Published 2006-06-13. Last modified 2026-06-16.