NetSight
medium4.3

CVE-2015-6138

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) pro…

Impact

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."

Affected products

VendorProductAffected versions
MicrosoftInternet Explorer
Versions 8, 9, 10, 11

Weakness classification

References