CVE-2015-2434

No fix known EPSS 16%

Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2471.

Published 2015-08-15 · CVE record · OSV

Products: microsoft xml_core_services