NVD

Id
22608  
Name
CVE-2015-0072  
Description
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka "Universal XSS (UXSS)."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-02-07  
Modified Date
2015-11-16  
Seq
2015-0072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119691 22608 CVE-2015-0072 http://community.websense.com/blogs/securitylabs/archive/2015/02/05/another-day-another-zero-day-internet-explorer-s-turn-cve-2015-0072.aspx  View
119692 22608 CVE-2015-0072 http://innerht.ml/blog/ie-uxss.html  View
119693 22608 CVE-2015-0072 http://packetstormsecurity.com/files/130308/Microsoft-Internet-Explorer-Universal-XSS-Proof-Of-Concept.html  View
119694 22608 CVE-2015-0072 20150131 Major Internet Explorer Vulnerability - NOT Patched  View
119695 22608 CVE-2015-0072 MS15-018  View
119696 22608 CVE-2015-0072 http://www.pcworld.com/article/2879372/dangerous-ie-vulnerability-opens-door-to-powerful-phishing-attacks.html  View
119697 22608 CVE-2015-0072 20150209 Cookie hijacking: Internet Explorer UXSS (CVE-2015-0072)  View
119698 22608 CVE-2015-0072 72489  View
119699 22608 CVE-2015-0072 1031888  View
119700 22608 CVE-2015-0072 ms-ie-cve20150072-xss(100606)  View
119701 22608 CVE-2015-0072 https://nakedsecurity.sophos.com/2015/02/04/internet-explorer-has-a-cross-site-scripting-zero-day-bug/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6020 JVNDB-2015-001340 Microsoft Internet Explorer 9 から 11 におけるクロスサイトスクリプティングの脆弱性 Microsoft Internet Explorer 9 から 11 には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-0072 77283 CVE-2015-0072 22608 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001340.html 2015-01-31 2015-03-12 View