Unscored severity · published Aug 15, 2015
CVE-2015-2471
Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network…
–
CVSS
15.5%
EPSS
No
On KEV
Description
Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2434.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XC
Xml Core Services · Microsoft
3.0; 5.0; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2471
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2471
www.securitytracker.com
http://www.securitytracker.com/id/1033241
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084
More from Xml Core Services
8.8
CVE-2012-1889
Microsoft XML Core Services Memory Corruption Vulnerability
6.5
CVE-2017-0022
Microsoft XML Core Services Information Disclosure Vulnerability
8.8
CVE-2016-0147
Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."
8.8
CVE-2013-0006
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka…
–
CVE-2015-2440
Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure…