CVE-2005-0049

no score yetEPSS 20%

Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2005-05-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:sharepoint_portal_server
microsoft:sharepoint_team_services

References

http://www.kb.cert.org/vuls/id/340409
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006
https://exchange.xforce.ibmcloud.com/vulnerabilities/19091
http://www.kb.cert.org/vuls/id/340409

Check your stack JSON