CVE-2008-5551

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Common Weakness Enumeration
References
http://securityreason.com/securityalert/4724
http://www.securityfocus.com/archive/1/499124/100/0/threaded
http://www.securityfocus.com/bid/32780
https://exchange.xforce.ibmcloud.com/vulnerabilities/47277
http://securityreason.com/securityalert/4724
http://www.securityfocus.com/archive/1/499124/100/0/threaded
http://www.securityfocus.com/bid/32780
https://exchange.xforce.ibmcloud.com/vulnerabilities/47277