CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-7295

Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.234

EPSS Ranking 95.6%

CVSS Severity

CVSS v2 Score 5.8

References

Products affected by CVE-2008-7295

Microsoft » Internet Explorer » Version: N/A

cpe:2.3:a:microsoft:internet_explorer:-
Microsoft » Internet Explorer » Version: 10

cpe:2.3:a:microsoft:internet_explorer:10
Microsoft » Internet Explorer » Version: 11

cpe:2.3:a:microsoft:internet_explorer:11
Microsoft » Internet Explorer » Version: 3.0

cpe:2.3:a:microsoft:internet_explorer:3.0
Microsoft » Internet Explorer » Version: 3.0.1

cpe:2.3:a:microsoft:internet_explorer:3.0.1
Microsoft » Internet Explorer » Version: 3.0.2

cpe:2.3:a:microsoft:internet_explorer:3.0.2
Microsoft » Internet Explorer » Version: 3.1

cpe:2.3:a:microsoft:internet_explorer:3.1
Microsoft » Internet Explorer » Version: 3.2

cpe:2.3:a:microsoft:internet_explorer:3.2
Microsoft » Internet Explorer » Version: 4.0

cpe:2.3:a:microsoft:internet_explorer:4.0
Microsoft » Internet Explorer » Version: 4.0.1

cpe:2.3:a:microsoft:internet_explorer:4.0.1
Microsoft » Internet Explorer » Version: 4.01

cpe:2.3:a:microsoft:internet_explorer:4.01
Microsoft » Internet Explorer » Version: 4.1

cpe:2.3:a:microsoft:internet_explorer:4.1
Microsoft » Internet Explorer » Version: 4.40.308

cpe:2.3:a:microsoft:internet_explorer:4.40.308
Microsoft » Internet Explorer » Version: 4.40.520

cpe:2.3:a:microsoft:internet_explorer:4.40.520
Microsoft » Internet Explorer » Version: 4.5

cpe:2.3:a:microsoft:internet_explorer:4.5
Microsoft » Internet Explorer » Version: 4.70.1155

cpe:2.3:a:microsoft:internet_explorer:4.70.1155
Microsoft » Internet Explorer » Version: 4.70.1158

cpe:2.3:a:microsoft:internet_explorer:4.70.1158
Microsoft » Internet Explorer » Version: 4.70.1215

cpe:2.3:a:microsoft:internet_explorer:4.70.1215
Microsoft » Internet Explorer » Version: 4.70.1300

cpe:2.3:a:microsoft:internet_explorer:4.70.1300
Microsoft » Internet Explorer » Version: 4.71.1008.3

cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3
Microsoft » Internet Explorer » Version: 4.71.1712.6

cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6
Microsoft » Internet Explorer » Version: 4.71.544

cpe:2.3:a:microsoft:internet_explorer:4.71.544
Microsoft » Internet Explorer » Version: 4.72.2106.8

cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8
Microsoft » Internet Explorer » Version: 4.72.3110.8

cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8
Microsoft » Internet Explorer » Version: 4.72.3612.1713

cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713
Microsoft » Internet Explorer » Version: 5

cpe:2.3:a:microsoft:internet_explorer:5
Microsoft » Internet Explorer » Version: 5.0

cpe:2.3:a:microsoft:internet_explorer:5.0
Microsoft » Internet Explorer » Version: 5.0.1

cpe:2.3:a:microsoft:internet_explorer:5.0.1
Microsoft » Internet Explorer » Version: 5.00.0518.10

cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10
Microsoft » Internet Explorer » Version: 5.00.0910.1309

cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309
Microsoft » Internet Explorer » Version: 5.00.2014.0216

cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216
Microsoft » Internet Explorer » Version: 5.00.2314.1003

cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003
Microsoft » Internet Explorer » Version: 5.00.2516.1900

cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900
Microsoft » Internet Explorer » Version: 5.00.2614.3500

cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500
Microsoft » Internet Explorer » Version: 5.00.2919.3800

cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800
Microsoft » Internet Explorer » Version: 5.00.2919.6307

cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307
Microsoft » Internet Explorer » Version: 5.00.2919.800

cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800
Microsoft » Internet Explorer » Version: 5.00.2920.0000

cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000
Microsoft » Internet Explorer » Version: 5.00.3103.1000

cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000
Microsoft » Internet Explorer » Version: 5.00.3105.0106

cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106
Microsoft » Internet Explorer » Version: 5.00.3314.2101

cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101
Microsoft » Internet Explorer » Version: 5.00.3315.1000

cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000
Microsoft » Internet Explorer » Version: 5.00.3502.1000

cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000
Microsoft » Internet Explorer » Version: 5.00.3700.1000

cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000
Microsoft » Internet Explorer » Version: 5.01

cpe:2.3:a:microsoft:internet_explorer:5.01
Microsoft » Internet Explorer » Version: 5.1

cpe:2.3:a:microsoft:internet_explorer:5.1
Microsoft » Internet Explorer » Version: 5.2.3

cpe:2.3:a:microsoft:internet_explorer:5.2.3
Microsoft » Internet Explorer » Version: 5.5

cpe:2.3:a:microsoft:internet_explorer:5.5
Microsoft » Internet Explorer » Version: 5.50.3825.1300

cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300
Microsoft » Internet Explorer » Version: 5.50.4030.2400

cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400
Microsoft » Internet Explorer » Version: 5.50.4134.0100

cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100
Microsoft » Internet Explorer » Version: 5.50.4134.0600

cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600
Microsoft » Internet Explorer » Version: 5.50.4308.2900

cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900
Microsoft » Internet Explorer » Version: 5.50.4522.1800

cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800
Microsoft » Internet Explorer » Version: 5.50.4807.2300

cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300
Microsoft » Internet Explorer » Version: 6

cpe:2.3:a:microsoft:internet_explorer:6
Microsoft » Internet Explorer » Version: 6.0

cpe:2.3:a:microsoft:internet_explorer:6.0
Microsoft » Internet Explorer » Version: 6.0.2600

cpe:2.3:a:microsoft:internet_explorer:6.0.2600
Microsoft » Internet Explorer » Version: 6.0.2800

cpe:2.3:a:microsoft:internet_explorer:6.0.2800
Microsoft » Internet Explorer » Version: 6.0.2800.1106

cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106
Microsoft » Internet Explorer » Version: 6.0.2900

cpe:2.3:a:microsoft:internet_explorer:6.0.2900
Microsoft » Internet Explorer » Version: 6.0.2900.2180

cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180
Microsoft » Internet Explorer » Version: 6.00.2462.0000

cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000
Microsoft » Internet Explorer » Version: 6.00.2479.0006

cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006
Microsoft » Internet Explorer » Version: 6.00.2600.0000

cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000
Microsoft » Internet Explorer » Version: 6.00.2800.1106

cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106
Microsoft » Internet Explorer » Version: 6.00.2900.2180

cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180
Microsoft » Internet Explorer » Version: 6.00.3663.0000

cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000
Microsoft » Internet Explorer » Version: 6.00.3718.0000

cpe:2.3:a:microsoft:internet_explorer:6.00.3718.0000
Microsoft » Internet Explorer » Version: 6.00.3790.0000

cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000
Microsoft » Internet Explorer » Version: 6.00.3790.1830

cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830
Microsoft » Internet Explorer » Version: 6.00.3790.3959

cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959
Microsoft » Internet Explorer » Version: 7

cpe:2.3:a:microsoft:internet_explorer:7
Microsoft » Internet Explorer » Version: 7.0

cpe:2.3:a:microsoft:internet_explorer:7.0
Microsoft » Internet Explorer » Version: 7.0.5730

cpe:2.3:a:microsoft:internet_explorer:7.0.5730
Microsoft » Internet Explorer » Version: 7.0.5730.11

cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11
Microsoft » Internet Explorer » Version: 7.00.5730.1100

cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100
Microsoft » Internet Explorer » Version: 7.00.6000.16386

cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386
Microsoft » Internet Explorer » Version: 7.00.6000.16441

cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441
Microsoft » Internet Explorer » Version: 8

cpe:2.3:a:microsoft:internet_explorer:8
Microsoft » Internet Explorer » Version: 8.0.6001

cpe:2.3:a:microsoft:internet_explorer:8.0.6001
Microsoft » Internet Explorer » Version: 9

cpe:2.3:a:microsoft:internet_explorer:9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-7295

Products

Pricing

Contact Us