Unscored severity · published Dec 31, 2004
CVE-2004-2625
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag
–
CVSS
2.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OE
Outblaze Email · Outblaze
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2625
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html
Patch
http://secunia.com/advisories/12084
Exploit
http://securitytracker.com/alerts/2004/Jul/1010735.html
www.osvdb.org
http://www.osvdb.org/8104
Exploit
http://www.securiteam.com/securitynews/5CP0O20DFI.html
www.securityfocus.com
http://www.securityfocus.com/bid/10756