CVE-2005-2830 json
Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext,…
published 2005-12-14 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-2831
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 35.5%
- EPSS 35.5% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Patch / fix
Exploit prediction
35.49% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
-
securityfocus.com
/bid/15825
vdb-entry, patch
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2005/ms05-054
vendor-advisory
-
secunia.com
/advisories/18064
third-party-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101
vdb-entry, signature
-
securitytracker.com
/id?1015350
vdb-entry
- support.avaya.com /elmodocs2/security/ASA-2005-234.pdf
-
secunia.com
/advisories/15368
third-party-advisory
-
vupen.com
/english/advisories/2005/2909
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435
vdb-entry, signature
-
secunia.com
/advisories/18311
third-party-advisory
-
vupen.com
/english/advisories/2005/2867
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143
vdb-entry, signature
-
exchange.xforce.ibmcloud.com
/vulnerabilities/23451
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521
vdb-entry, signature
- www130.nortelnetworks.com /cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
Sources
- CVE List CVE-2005-2830
- NVD CVE-2005-2830
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.