Vulnerability Details : CVE-2001-0338
Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."
Exploit prediction scoring system (EPSS) score for CVE-2001-0338
Probability of exploitation activity in the next 30 days: 1.02%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 82 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2001-0338
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.1
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:P |
4.9
|
6.4
|
NIST |
References for CVE-2001-0338
Products affected by CVE-2001-0338
- cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*