Unrated severityNVD Advisory· Published Jul 21, 2001· Updated Apr 16, 2026
CVE-2001-0340
CVE-2001-0340
Description
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
Affected products
2cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-030nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/6652nvdThird Party AdvisoryVDB Entry
- www.ciac.org/ciac/bulletins/l-091.shtmlnvdBroken Link
News mentions
0No linked articles in our index yet.