CVE-2001-1325

high

Description

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/6448

https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1306

http://www.securityfocus.com/bid/2633

http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com

Details

Source: Mitre, NVD

Published: 2001-04-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.27292