VDB

GCVE-110-CERTCC-2007-124113

GCVE-110-CERTCC-2007-124113
Advisory Published
Vulnetix · Advisory published May 8, 2007
Microsoft Exchange Outlook Web Access (OWA) fails to properly handle the UTF character set label, which can allow a remote, unauthenticated attacker to execute script within the security context of the OWA user.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact4population14exploitation0widely_known16score_current5.46ease_of_exploitation10
certcc-vrda
certcc-vrda
d1_impact4d1_population4d1_direct_report0

Aliases

CVE-2007-0220

Transitive aliases

GSD-2007-0220CVE-2007-0221GSD-2007-0039GSD-2007-0213GHSA-g5ff-82hw-j5f8CVE-2007-0213GHSA-wphx-9m7p-vhwcGHSA-x698-9hf8-hpr3VVD-CERTCC-2007-343145GSD-2007-0221CVE-2007-0039GHSA-88qq-62qw-v7mh

References

Microsoft Exchange Outlook Web Access UTF character set label script injection vulnerability
advisory
Microsoft Exchange Outlook Web Access UTF character set label script injection vulnerability
url
Microsoft Exchange Outlook Web Access UTF character set label script injection vulnerability
advisory

Browse GCVE Records

72,580 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›