CVE-2004-2765 - CVE House

Back to Database

Status published Medium CVE-2004-2765

Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging...

4.3 CVSS

Vulnerability Description

Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2765

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from sun

View All →

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5)...

Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and...

Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager...

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows...

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0)...

Affected Vendor

sun

View all reports →

Affected Software

iplanet messaging server, one messaging server

Vulnerable Versions:

5.2, 6.1

Timeline

Official Publish: January 28th, 2010

Last Modified: September 16th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.