CVE Catalog

CVE-1999-0750

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
8.73%

94th percentile - higher than 94% of all known CVEs

Summary

Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.

Risk Assessment

Attackers may gain access to the user's account, potentially leading to data theft or account takeover.

Recommendation

It is recommended to avoid using the STYLE tag in HTML and to implement additional security measures such as input filtering and validation.

Original NVD description (English source)

Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS