Vulnerability Details CVE-2015-1646
Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.332
EPSS Ranking 96.7%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2015-1646
-
cpe:2.3:a:microsoft:xml_core_services:3.0