oval:org.mitre.oval:def:5695

Definition Id: oval:org.mitre.oval:def:5695

Oval ID:	oval:org.mitre.oval:def:5695
Title:	OWA For Exchange Server Parsing XSS Vulnerability
Description:	Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2008-2248	Version:	1
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft Exchange Server
Definition Synopsis:
IF Microsoft Exchange Server 2007 (no Service Pack) is installed AND cdoex.dll is less than 8.0.813.0 OR Microsoft Exchange Server 2007 SP1 is installed AND cdoex.dll is less than 8.1.291.1

Definition Id: oval:org.mitre.oval:def:1641

Oval ID:	oval:org.mitre.oval:def:1641
Title:	Microsoft Exchange Server 2007 (no Service Pack) is installed
Description:	Exchange Server 2007 (no Service Pack) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:exchange_server:2007:gold	Version:	5
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
Exchange Server 2007 is installed. AND No Exchange Server 2007 SP is installed.
Referenced By:
oval:org.mitre.oval:def:5695

Definition Id: oval:org.mitre.oval:def:5577

Oval ID:	oval:org.mitre.oval:def:5577
Title:	Microsoft Exchange Server 2007 SP1 is installed
Description:	Exchange Server 2007 SP1 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:exchange_server:2007:sp1	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
Exchange Server 2007 is installed. AND Exchange Server 2007 SP1 is installed.
Referenced By:
oval:org.mitre.oval:def:5695