VULNERABILITY INTELLIGENCE

CVE-2011-4689

CVSS score5 MEDIUM
EPSS probability9.40%
CISA KEVNot currently listed
Published2011-12-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

Primary references