CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2001-0726
https://notcve.org/view.php?id=CVE-2001-0726
Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message. • http://www.osvdb.org/5557 http://www.securityfocus.com/bid/3650 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057 https://exchange.xforce.ibmcloud.com/vulnerabilities/7663 •
CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0CVE-2001-0660
https://notcve.org/view.php?id=CVE-2001-0660
Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL). • http://support.microsoft.com/support/kb/articles/Q307/1/95.ASP http://www.securityfocus.com/bid/3301 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-047 https://exchange.xforce.ibmcloud.com/vulnerabilities/7089 •
CVSS: 5.0EPSS: 0%CPEs: 9EXPL: 0CVE-2001-0509
https://notcve.org/view.php?id=CVE-2001-0509
Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2001-0340
https://notcve.org/view.php?id=CVE-2001-0340
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically. • http://www.ciac.org/ciac/bulletins/l-091.shtml https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-030 https://exchange.xforce.ibmcloud.com/vulnerabilities/6652 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 5.0EPSS: 3%CPEs: 2EXPL: 0CVE-2001-1319
https://notcve.org/view.php?id=CVE-2001-1319
Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite. • http://ciac.llnl.gov/ciac/bulletins/l-116.shtml http://www.cert.org/advisories/CA-2001-18.html http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3 http://www.kb.cert.org/vuls/id/763400 http://www.kb.cert.org/vuls/id/CFCN-4YAQC7 http://www.securityfocus.com/bid/3045 https://exchange.xforce.ibmcloud.com/vulnerabilities/6899 •