CVE-2001-1325
high · 7.5Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).
7.5
CVSS
27.3%
EPSS (exploit prob.)
98th
EPSS percentile
2001-04-20
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_explorer | 5.0 |
| microsoft | internet_explorer | 5.5 |
| microsoft | outlook_express | 5.0 |
| microsoft | outlook_express | 5.5 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com
- http://www.securityfocus.com/bid/2633
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6448
- http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com
- http://www.securityfocus.com/bid/2633
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6448
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2001-1325