CVE-2014-6328 — Improper Input Validation in Microsoft Internet Explorer

CWE-20 — Improper Input Validation7 documents4 sources
Severity
5.0MEDIUMNVD
NVD4.3
EPSS
27.3%
top 3.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Internet Explorer
Timeline
PublishedDec 11
Latest updateMay 14

Description

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability," a different vulnerability than CVE-2014-6365.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/internet_explorer4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-rmmr-5g2r-2c4w: Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, a↗2022-05-14
▶
GHSA
GHSA-947f-h5gc-f7f5: Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, a↗2022-05-14
▶

🕵️Threat Intelligence

3
Talos
Microsoft Patch Tuesday for December 2014: Light Month, Some Changes↗2014-12-09
▶
Talos
Microsoft Patch Tuesday for December 2014: Light Month, Some Changes↗2014-12-09
▶
Zscaler
Zscaler found Security Vulnerabilities in MS Exchange Server↗
▶
CVE-2014-6328 — Improper Input Validation in Microsoft | cvebase