{"id":"CVE-2015-0072","published":"2015-02-07T18:00:00Z","modified":"2024-08-06T03:55:27Z","title":"Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka \"Universal XSS (UXSS).\"","provenance":"source","from":"CVE.org"},"summary":{"text":"A cross-site scripting flaw in Microsoft Internet Explorer versions 9 through 11 allows the Same Origin Policy to be bypassed, enabling the injection of arbitrary script or HTML. An attacker can exploit it remotely through a crafted page that uses a redirecting IFRAME, a second non-redirecting IFRAME, and an eval of a WindowProxy object, with no authentication or configuration required beyond the victim browsing to that content.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:45Z"},"cvss":null,"epss":{"score":0.71698,"percentile":0.9942,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2015-03-10","exploitedFirstSeen":"2015-03-10","ransomware":false,"evidence":[{"url":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018","date":"2015-03-10"},{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"CVE -CVE Reference Map for Source MS - Curios RE active candidates CVE version 20061101","url":"https://otx.alienvault.com/pulse/679c3446de4f362fac9217f9","created":"2025-01-31"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://secunia.com/advisories/62658","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018","tags":["vendor-advisory","x_refsource_MS"]},{"url":"http://www.securitytracker.com/id/1031888","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://community.websense.com/blogs/securitylabs/archive/2015/02/05/another-day-another-zero-day-internet-explorer-s-turn-cve-2015-0072.aspx","tags":["x_refsource_MISC"]},{"url":"https://nakedsecurity.sophos.com/2015/02/04/internet-explorer-has-a-cross-site-scripting-zero-day-bug/","tags":["x_refsource_MISC"]},{"url":"http://www.pcworld.com/article/2879372/dangerous-ie-vulnerability-opens-door-to-powerful-phishing-attacks.html","tags":["x_refsource_MISC"]},{"url":"http://innerht.ml/blog/ie-uxss.html","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/archive/1/534662/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://packetstormsecurity.com/files/130308/Microsoft-Internet-Explorer-Universal-XSS-Proof-Of-Concept.html","tags":["x_refsource_MISC"]},{"url":"http://seclists.org/fulldisclosure/2015/Feb/0","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100606","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/bid/72489","tags":["vdb-entry","x_refsource_BID"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 1)","mappingType":"uncategorized","evidence":[],"confidence":"low","confidenceNote":"CTID attack_to_cve Phase 1 \"Uncategorized\" mapping (not staged by impact)"}],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":" CVE-2015-0072 is a cross-site scripting (XSS) vulnerability in Internet","start":115263,"end":115336},{"quote":"CVE-2015-0072","start":115906,"end":115919},{"quote":"60, 61\r\nCVE-2012-0056, 60\r\nCVE-2012-0158, 62\r\nCVE-2012-0507, 57\r\nCVE-2012-1723, 56, 57, 58, 59\r\nCVE-2012-1889, 64\r\nCVE-2013-0074, 56\r\nCVE-2013-0422, 57, 59\r\nCVE-2013-1493, 56\r\nCVE-2013-2423, 56\r\nCVE-2013-2460, 56\r\nCVE-2013-2551, 56\r\nCVE-2013-3896, 56\r\nCVE-2014-1761, 62\r\nCVE-2014-6332, 61\r\nCVE-2015-0072,","start":261288,"end":261592}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2015-0110","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0110","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2015-02-21","earliestUrl":"https://github.com/dbellavista/uxss-poc","repos":[{"name":"dbellavista/uxss-poc","url":"https://github.com/dbellavista/uxss-poc","stars":7,"created":"2015-02-21"}]},"metasploit":[{"name":"MS15-018 Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection","module":"auxiliary/gather/ie_uxss_injection","type":"auxiliary","disclosureDate":"2015-02-01","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ie_uxss_injection.rb"}],"first":{"date":"2015-02-01","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ie_uxss_injection.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/130308/Microsoft-Internet-Explorer-Universal-XSS-Proof-Of-Concept.html"],"flow":[{"stage":"related","techniques":["T1190"],"provenance":"source","lowConfidence":true}],"timeline":[{"date":"2015-02-01","kind":"exploit-public","label":"First public exploit: Metasploit; later: PoC-in-GitHub 2015-02-21","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ie_uxss_injection.rb","provenance":"source"},{"date":"2015-02-07","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-0072","provenance":"source"},{"date":"2015-03-10","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":64.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4251 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.88,"detail":"percentile 0.9942"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD exploit link; 1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}