CVE-2002-0648

The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and…

published April 2, 2003

CVSS

—

EPSS

48%

Percentile

98.9

In the wild

Unconfirmed

What it is

The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.48441 · 98.9th percentile
Published: 2003-04-02T05:00Z

EPSS history

Timeline

02 APR 05:00Z
The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and…
cvelistv5