CVE-2005-2022

Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2005-06-17

Last modified

2024-08-07

Weaknesses

CWE-79

Affected products

• Iplanet Messaging Server (Sun)
• One Messaging Server (Sun)

References

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1
• http://www.vupen.com/english/advisories/2005/0816