CVE-2002-2101

Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.

Scoring

CVSS base score
0.96
EPSS probability
19.17%
Published
2005-08-05
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs