VULNERABILITY INTELLIGENCE

CVE-2000-0465

CVSS score5.1 MEDIUM
EPSS probability20.81%
CISA KEVNot currently listed
Published2000-05-17
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.

Primary references