CVE-2001-1325

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 27.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-05-03 · updated 2026-06-16

Description

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

Affected products

Microsoft Internet Explorer 11: 5.0, 5.5
Microsoft Outlook Express: 5.0, 5.5

References

http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com
http://www.securityfocus.com/bid/2633
https://exchange.xforce.ibmcloud.com/vulnerabilities/6448
http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com
http://www.securityfocus.com/bid/2633
https://exchange.xforce.ibmcloud.com/vulnerabilities/6448

Get alerted when CVE-2001-1325 or the next vulnerability affects your stack