GCVE-VVD-CERTCC-2006-547212

Advisory Published

Vulnetix · Advisory published October 10, 2006

The Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations. An attacker who exploits this vulnerability may be able to read cookies or view other sensitive data from a vulnerable system.

Download JSON Open in Console

Risk Scores

certcc-cam

impact12population17exploitation0widely_known9score_current0.39015ease_of_exploitation3

certcc-vrda

d1_impact4d1_population4d1_direct_report0

Aliases

CVE-2006-4685

Transitive aliases

GHSA-hmr7-6hpx-fg3j VVD-CERTCC-2006-562788 GSD-2006-4686 CVE-2006-4686 GSD-2006-4685 GHSA-9w44-mcv5-p9qh

References

Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations

advisory

Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations

url

Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations

advisory

Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations

advisory

Browse GCVE Records

73,685 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON