Microsoft Exchange Server 5.5 Service Pack 2
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*
part: a version: 5.5 update: sp2
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Exchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-0002 |
vulnerable | 2026-06-08 04:48:45.576954 |
Details available
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
Published: 2006-01-10T22:00:00.000Z
Updated: 2024-08-07T16:18:20.527Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0203 |
vulnerable | 2026-06-08 04:47:48.993825 |
Details available
Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.
Published: 2004-08-12T04:00:00.000Z
Updated: 2024-08-08T00:10:03.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0714 |
vulnerable | 2026-06-08 04:47:22.291061 |
Details available
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
Published: 2003-10-17T04:00:00.000Z
Updated: 2024-08-08T02:05:12.501Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0712 |
vulnerable | 2026-06-08 04:47:22.284756 |
Details available
Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.
Published: 2003-10-17T04:00:00.000Z
Updated: 2024-08-08T02:05:12.423Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1790 |
vulnerable | 2026-06-08 04:47:18.161946 |
Details available
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-17T01:40:52.287Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0698 |
vulnerable | 2026-06-08 04:46:22.045885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0507 |
vulnerable | 2026-06-08 04:46:21.591594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0054 |
vulnerable | 2026-06-08 04:46:20.511143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0682 |
vulnerable | 2026-06-08 04:44:58.083736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.