CVE-2008-1547: Microsoft Exchange Server

Medium severity, CVSS 4.3. EPSS: 48.1% chance of exploitation in the next 30 days.

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.

Affected products

• Microsoft Exchange Server: version 2003 only

Published 2008-10-21. Last modified 2026-06-16.