Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductInternet Explorer (bbd5d868-ece4-553d-ad32-7763b4ff07af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35240 not_vulnerable 2026-06-08 05:32:48.576948 Stored XSS via Help Server settings
MEDIUM (6.5)
A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'.
Published: 2021-08-31T15:57:21.000Z
Updated: 2024-08-04T00:33:51.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15138 not_vulnerable 2026-06-08 05:19:25.356652 Cross-Site Scripting in Prism
HIGH (7.1)
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism >=v1.1.0 that use the _Previewers_ plugin (>=v1.10.0) or the _Previewer: Easing_ plugin (v1.1.0 to v1.9.0). This problem is fixed in version 1.21.0. To workaround the issue without upgrading, disable the easing preview on all impacted code blocks. You need Prism v1.10.0 or newer to apply this workaround.
Published: 2020-08-07T16:30:14.000Z
Updated: 2024-08-04T13:08:21.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17070 not_vulnerable 2026-06-08 05:13:09.861286 Details available
The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer.
Published: 2019-10-10T10:51:18.000Z
Updated: 2024-08-05T01:33:16.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18966 not_vulnerable 2026-06-08 05:11:15.030862 Details available
osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but Internet Explorer render HTML elements in a .eml file.
Published: 2018-11-06T04:00:00.000Z
Updated: 2024-08-05T11:23:08.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17039 not_vulnerable 2026-06-08 05:11:05.873216 Details available
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.
Published: 2018-09-14T07:00:00.000Z
Updated: 2024-08-05T10:39:59.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7153 vulnerable 2026-06-08 05:08:11.968207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7152 vulnerable 2026-06-08 05:08:11.966597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8960 not_vulnerable 2026-06-08 05:07:05.787561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4000 vulnerable 2026-06-08 05:06:38.989672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8967 vulnerable 2026-06-08 05:06:10.542747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3979 not_vulnerable 2026-06-08 05:04:33.436705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1489 not_vulnerable 2026-06-08 05:03:54.424870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3389 vulnerable 2026-06-08 04:59:25.367201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0918 not_vulnerable 2026-06-08 04:48:13.938394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0862 vulnerable 2026-06-08 04:46:22.398136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.