CVE-2015-6138

medium · 4.3

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."

4.3

CVSS

12.1%

EPSS (exploit prob.)

96th

EPSS percentile

2015-12-09

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	8
microsoft	internet_explorer	9
microsoft	internet_explorer	10
microsoft	internet_explorer	11

Check a specific version with /api/v1/cve/match.

References

http://www.securitytracker.com/id/1034315
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-124
http://www.securitytracker.com/id/1034315
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-124

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-6138