CVE-2015-2434

medium · 4.3

Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2471.

4.3

CVSS

15.5%

EPSS (exploit prob.)

97th

EPSS percentile

2015-08-15

Published

AV:N/AC:M/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200CWE-310

Affected products

Vendor	Product	Affected versions
microsoft	xml_core_services	3.0
microsoft	xml_core_services	5.0

Check a specific version with /api/v1/cve/match.

References

http://www.securitytracker.com/id/1033241
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084
http://www.securitytracker.com/id/1033241
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-2434