VULNERABILITY INTELLIGENCE
CVE-2001-0338
CVSS score5.1 MEDIUM
EPSS probability5.32%
CISA KEVNot currently listed
Published2001-06-27
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."