CVE-2015-6138 in Internet Explorer

Sumário

de MITRE

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 14/08/2015
• Divulgação: 09/12/2015
• Moderação: aceite
• Entrada: VDB-79449
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.3 (NVD)
• EPSS: 0.12098
• KEV: não
• Atividades: muito baixo
• Sector: Chemical, Homeoffice, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6138
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6138
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6138/