CVE-2001-1325

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

27.29% chance of exploitation in the next 30 days, 98th percentile

Published

2002-05-03

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20782

References

• CVE Record
• NVD entry

Related

• CVE-2001-1320
• CVE-2001-1326
• CVE-2001-1303
• CVE-2001-1334
• CVE-2001-1294
• CVE-2001-1335