CVE-2004-1645: Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web scri...

Security readout for executives and security teams

CVE-2004-1645 is a cross-site scripting issue in Xedus 1.0. A remote attacker may cause vulnerable test endpoints to return attacker-controlled script or HTML. Business risk is highest if this old webserver is still exposed to users, because XSS can support account abuse, phishing, or session theft in a victim’s browser. Exposure appears limited to environments still running Xedus 1.0 with the named test endpoints reachable. The source bundle lists no modern CPE data, so asset confirmation is required before assuming exposure. Prioritize if Xedus 1.0 is internet-facing or used by authenticated business users. If not present, document non-exposure and close. The age and sparse metadata make discovery the main decision point. Mitigation focus: Identify and retire any Xedus 1.0 deployments.; Restrict or disable exposed Xedus test endpoints where operationally feasible.; Check vendor or archived advisory guidance for fixed releases or workarounds..

Prepared

Jun 30, 2026, 00:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.