CVE-2014-6365 - Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability," a different vulnerability than CVE-2014-6328

Back Back to CVE browser

MEDIUM

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability," a different vulnerability than CVE-2014-6328

Published Dec 11, 2014

4.3

MEDIUM

CVSS 2.0

EPSS 24.70%

Description

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability," a different vulnerability than CVE-2014-6328.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-6249
Advisory

Link	Providers	Tags
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-6249		Advisory