GCVE - cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Xml Core Services (`11c4f5e1-37d7-5ca9-af82-162533a1e934`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2471`	vulnerable	2026-06-08 05:06:35.098876	Details available Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2434. Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:26.576Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033241 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2440`	vulnerable	2026-06-08 05:06:35.044893	Details available Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure Vulnerability." Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:26.169Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033241 http://www.securityfocus.com/bid/76232 http://www.zerodayinitiative.com/advisories/ZDI-15-381 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2434`	vulnerable	2026-06-08 05:06:35.032009	Details available Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2471. Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:26.248Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033241 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0007`	vulnerable	2026-06-08 05:03:01.658733	Details available Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability." Published: 2013-01-09T18:00:00.000Z Updated: 2024-08-06T14:10:56.771Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA13-008A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15458 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0006`	vulnerable	2026-06-08 05:03:01.650347	Details available Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability." Published: 2013-01-09T18:00:00.000Z Updated: 2025-01-16T20:51:20.538Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA13-008A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16429 https://us-cert.cisa.gov/ics/advisories/icsa-20-315-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1889`	vulnerable	2026-06-08 05:00:51.244993	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4033`	vulnerable	2026-06-08 04:50:37.557064	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2223`	vulnerable	2026-06-08 04:49:44.362850	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.