CVE-2008-5556

medium · 4.3

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design.

4.3

CVSS

11.2%

EPSS (exploit prob.)

96th

EPSS percentile

2008-12-12

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	8

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/archive/1/499124/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/47277
http://www.securityfocus.com/archive/1/499124/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/47277

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-5556