CVE-2015-6058
Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via…
published October 14, 2015
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.
What it is
Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass."
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.69997 · 99.4th percentile
- Published
- 2015-10-14T01:00Z
EPSS history
Timeline