Vulnerability Details CVE-2016-7282
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.023
EPSS Ranking 83.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://www.securityfocus.com/bid/94724
- http://www.securitytracker.com/id/1037444
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-144
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145
- http://www.securityfocus.com/bid/94724
- http://www.securitytracker.com/id/1037444
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-144
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145
Products affected by CVE-2016-7282
-
cpe:2.3:a:microsoft:edge:-
-
cpe:2.3:a:microsoft:internet_explorer:10
-
cpe:2.3:a:microsoft:internet_explorer:11
-
cpe:2.3:a:microsoft:internet_explorer:9