Vulnerability Details CVE-2015-2434
Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2471.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.307
EPSS Ranking 96.5%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2015-2434
-
cpe:2.3:a:microsoft:xml_core_services:3.0
-
cpe:2.3:a:microsoft:xml_core_services:5.0