CVE-2004-0271: Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbit...

Security readout for executives and security teams

MaxWebPortal had multiple cross-site scripting flaws that could let a remote attacker run script in another user’s browser. Business impact depends on whether the legacy ASP application is still deployed and who uses it, especially administrators. Exposure is most likely in organizations still running MaxWebPortal or archived legacy ASP sites. The provided affected-product metadata is incomplete, so inventory confirmation is required before assuming exposure. Treat this as a legacy exposure cleanup item. It is not KEV-listed, but public-facing unsupported MaxWebPortal can create account compromise risk and should be retired, isolated, or fixed. Mitigation focus: Identify any active MaxWebPortal deployments or archived ASP copies.; Check vendor or maintainer guidance for fixed versions or retirement recommendations.; Retire or isolate unsupported MaxWebPortal instances where feasible..

Prepared

Jun 30, 2026, 06:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.