CVE-2001-0726

no score yetEPSS 16%

Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2001-12-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:exchange_server

References

http://www.osvdb.org/5557
http://www.securityfocus.com/bid/3650
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057
https://exchange.xforce.ibmcloud.com/vulnerabilities/7663
http://www.osvdb.org/5557

Check your stack JSON