CVE-2004-2625

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag.

Affected products

Outblaze Email: all versions

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html
http://secunia.com/advisories/12084
http://securitytracker.com/alerts/2004/Jul/1010735.html
http://www.osvdb.org/8104
http://www.securiteam.com/securitynews/5CP0O20DFI.html
http://www.securityfocus.com/bid/10756
http://www.swp-zone.org/archivos/advisory-09.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/16788
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html
http://secunia.com/advisories/12084
http://securitytracker.com/alerts/2004/Jul/1010735.html
http://www.osvdb.org/8104

Get alerted when CVE-2004-2625 or the next vulnerability affects your stack