VULNERABILITY INTELLIGENCE
CVE-2015-2471
CVSS score4.3 MEDIUM
EPSS probability15.54%
CISA KEVNot currently listed
Published2015-08-15
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2434.