CVE-2015-6144 - Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Browser XSS Filter Bypass Vulnerability."

Back Back to CVE browser

MEDIUM

Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Browser XSS Filter Bypass Vulnerability."

Published Dec 9, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 13.39%

Description

Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Browser XSS Filter Bypass Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www.securitytracker.com/id/1034315
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-124
vendor-advisoryx_refsource_MS
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-125
vendor-advisoryx_refsource_MS

Link	Providers	Tags
http://www.securitytracker.com/id/1034315		vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-124		vendor-advisoryx_refsource_MS
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-125		vendor-advisoryx_refsource_MS