GCVE - cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Xml Core Services (`11c4f5e1-37d7-5ca9-af82-162533a1e934`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2471`	vulnerable	2026-06-08 05:06:35.098897	Details available Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2434. Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:26.576Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033241 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2440`	vulnerable	2026-06-08 05:06:35.046857	Details available Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure Vulnerability." Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:26.169Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033241 http://www.securityfocus.com/bid/76232 http://www.zerodayinitiative.com/advisories/ZDI-15-381 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1816`	vulnerable	2026-06-08 05:05:26.366412	Details available Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action, which allows remote attackers to discover (1) full pathnames on the client system and (2) local usernames embedded in these pathnames via a crafted web site, aka "MSXML Entity URI Vulnerability." Published: 2014-06-11T01:00:00.000Z Updated: 2024-08-06T09:50:11.564Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-033 http://www.securityfocus.com/bid/67895 http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx http://secunia.com/advisories/58538	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0007`	vulnerable	2026-06-08 05:03:01.658491	Details available Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability." Published: 2013-01-09T18:00:00.000Z Updated: 2024-08-06T14:10:56.771Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA13-008A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15458 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0006`	vulnerable	2026-06-08 05:03:01.647590	Details available Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability." Published: 2013-01-09T18:00:00.000Z Updated: 2025-01-16T20:51:20.538Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA13-008A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16429 https://us-cert.cisa.gov/ics/advisories/icsa-20-315-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1889`	vulnerable	2026-06-08 05:00:51.240647	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4033`	vulnerable	2026-06-08 04:50:37.554027	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2223`	vulnerable	2026-06-08 04:49:44.347932	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4686`	vulnerable	2026-06-08 04:49:18.554901	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4685`	vulnerable	2026-06-08 04:49:18.553889	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.