CVE-2015-6138 in Internet Explorer

Résumé

par MITRE

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 14/08/2015
• Divulgation: 09/12/2015
• Modérer: accepté
• Entrée: VDB-79449
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 4.3 (NVD)
• EPSS: 0.12098
• KEV: non
• Activités: très faible
• Secteur: Telecommunication, Homeoffice, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6138
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6138
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6138/