Back
CVE-2004-2625
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag.
Published: Dec 31, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| outblaze | outblaze_email | * |
GitHub Security Advisory GHSA-j959-4486-mmwm
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject...
References (16)
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html Exploit
- http://secunia.com/advisories/12084 Patch, Vendor Advisory
- http://securitytracker.com/alerts/2004/Jul/1010735.html Exploit
- http://www.osvdb.org/8104
- http://www.securiteam.com/securitynews/5CP0O20DFI.html Exploit
- http://www.securityfocus.com/bid/10756
- http://www.swp-zone.org/archivos/advisory-09.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16788
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html Exploit
- http://secunia.com/advisories/12084 Patch, Vendor Advisory
- http://securitytracker.com/alerts/2004/Jul/1010735.html Exploit
- http://www.osvdb.org/8104
- http://www.securiteam.com/securitynews/5CP0O20DFI.html Exploit
- http://www.securityfocus.com/bid/10756
- http://www.swp-zone.org/archivos/advisory-09.txt
Risk Scores
CVSS Score
5.1 / 10
EPSS Score
2.59%
Top 16% most likely to be exploited
Threat Score
21.2 / 100
Data Sources
NVD
EPSS
GitHub