CVE-2015-6176

Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via…

published December 9, 2015

CVSS
—
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass Vulnerability."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14116 · 96.6th percentile
Published
2015-12-09T11:00Z
EPSS history
Timeline
  • 09 DEC 11:00Z
    Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via…
    cvelistv5