CVE Vulnerabilities

CVE-2015-1646

Published: Apr 14, 2015 | Modified: Apr 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka MSXML3 Same Origin Policy SFB Vulnerability.

Affected Software

NameVendorStart VersionEnd Version
Xml_core_servicesMicrosoft3.0 (including)3.0 (including)

References