CVE-2001-1325 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 27.3% (pctl 98)
Patch early
A public exploit exists.
Description
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 27.29% — more likely to be exploited than 98% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2001-04-20 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | internet explorer |
| microsoft | outlook express |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Internet Explorer 5.0/5.5 / OE 5.5 - XML Stylesheets Active Scripting | 2001-04-20 |
References
- http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com
- http://www.securityfocus.com/bid/2633
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6448
- http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com
- http://www.securityfocus.com/bid/2633
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6448
→ the Explorer · watch your stack · NVD