CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Exchange, Java. It may be remotely exploitable.
CVE
CVE-2007-2382
Severity
MEDIUM
CVSS
5
EPSS
1.56%
Exchange Java
Original NVD Description
The Moo.fx framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."