CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. It affects Microsoft, Java. Its EPSS score suggests a 24.7% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2008-2947
Severity
MEDIUM
CVSS
6.8
EPSS
24.74%
Microsoft Java
Original NVD Description
Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a (1) location or (2) location.href property, related to incorrect determination of the origin of web script, aka "Window Location Property Cross-Domain Vulnerability." NOTE: according to Microsoft, CVE-2008-2948 and CVE-2008-2949 are duplicates of this issue, probably different attack vectors.