Vulnerability Details CVE-2015-2471
Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2434.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.369
EPSS Ranking 97.0%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2015-2471
-
cpe:2.3:a:microsoft:xml_core_services:3.0
-
cpe:2.3:a:microsoft:xml_core_services:5.0
-
cpe:2.3:a:microsoft:xml_core_services:6.0