CVE-2005-0420

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-02-15 · updated 2026-06-16
Weakness: CWE-601

Description

Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

Affected products

Microsoft Exchange Server: 2003-sp1; 2003

References

http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html
http://secunia.com/advisories/14144
http://www.securityfocus.com/bid/12459
http://www.vupen.com/english/advisories/2005/0105
https://exchange.xforce.ibmcloud.com/vulnerabilities/19225
http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html
http://secunia.com/advisories/14144
http://www.securityfocus.com/bid/12459
http://www.vupen.com/english/advisories/2005/0105
https://exchange.xforce.ibmcloud.com/vulnerabilities/19225

Get alerted when CVE-2005-0420 or the next vulnerability affects your stack