{"id":"CVE-2001-1325","aliases":["EUVD-2001-1306","GHSA-54x3-chv9-w529"],"status":"published","title":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute...","description":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.27292,"percentile":0.98072,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2001-04-20T04:00:00Z","modified":"2026-06-16T21:56:02Z","exploits":[{"source":"exploitdb","id":"EDB-20782","title":"Microsoft Internet Explorer 5.0/5.5 / OE 5.5 - XML Stylesheets Active Scripting","type":"remote","platform":"windows","date":"2001-04-20","verified":true,"url":"https://www.exploit-db.com/exploits/20782"}],"products":[{"vendor":"microsoft","product":"internet_explorer"},{"vendor":"microsoft","product":"outlook_express"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6448","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/2633","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-1325"},{"url":"http://www.securityfocus.com/archive/1/3AE02004.57FDF958@guninski.com"},{"url":"https://github.com/advisories/GHSA-54x3-chv9-w529"}],"sources":{"cve":[{"id":"CVE-2001-1325","description":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).","status":"published","published":"2002-05-03T04:00:00Z","modified":"2024-08-08T04:51:07.968Z","updated_at":"2026-11-02T14:34:42.354707Z"}],"euvd":[{"id":"EUVD-2001-1306","description":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).","status":"published","published":"2002-05-03T04:00:00Z","modified":"2024-08-08T04:51:07Z","updated_at":"2026-11-03T00:56:28.268448Z"}],"ghsa":[{"id":"GHSA-54x3-chv9-w529","title":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute...","description":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).","status":"published","published":"2022-04-30T18:17:48Z","modified":"2025-04-03T03:40:31Z","updated_at":"2026-11-02T15:00:37.520566Z"}],"nvd":[{"id":"CVE-2001-1325","description":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).","status":"published","published":"2001-04-20T04:00:00Z","modified":"2026-06-16T21:56:02.847Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:39.593487Z"}]}}