CVE-2001-1325 in the critical feed json
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled…
published 2001-04-20 25 y ago modified 2026-06-16 4 mo ago also EUVD-2001-1306
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 27.3%
- EPSS 27.3% chance of exploitation in 30 days, percentile 98%
- public exploits
- 1
- Exploit-DB
Summary
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).
Patch / fix
- securityfocus.com/bid/2633 advisory
Timeline
- First public exploit (EDB-20782)
- Published
Exploit prediction
27.29% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-20782 Microsoft Internet Explorer 5.0/5.5 / OE 5.5 - XML Stylesheets Active Scripting remote, 2001-04-20
- securityfocus.com http://www.securityfocus.com/bid/2633 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/2633
vdb-entry, exploit, patch, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/6448
vdb-entry
-
securityfocus.com
/archive/1/3AE02004.57FDF958%40guninski.com
mailing-list
Sources
- CVE List CVE-2001-1325
- NVD CVE-2001-1325
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.