Lucene search

K
nvd[email protected]NVD:CVE-2004-2765
HistoryJan 28, 2010 - 8:30 p.m.

CVE-2004-2765

2010-01-2820:30:01
CWE-79
web.nvd.nist.gov
1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.

Affected configurations

NVD
Node
suniplanet_messaging_serverMatch5.2
AND
sunsolarisMatch2.6sparc
OR
sunsolarisMatch8.0sparc
Node
sunone_messaging_serverMatch6.1
AND
sunsolarisMatch8.0sparc
OR
sunsolarisMatch9.0sparc
Node
sunone_messaging_serverMatch6.1
AND
sunsolarisMatch9.0x86
Node
sunone_messaging_serverMatch6.1
AND
redhatenterprise_linuxMatch2.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

Related for NVD:CVE-2004-2765