VULNERABILITY INTELLIGENCE

CVE-2001-1325

CVSS score7.5 HIGH
EPSS probability27.29%
CISA KEVNot currently listed
Published2001-04-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

Primary references