# CVE-2001-1325

## Summary

- **CVE ID:** CVE-2001-1325
- **Severity:** UNKNOWN
- **CVSS Score:** 0.69
- **CWE:** N/A
- **Published:** May 3, 2002
- **Last Modified:** Mar 16, 2026

## Description

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/6448)
- [CNA](http://www.securityfocus.com/bid/2633)
- [CNA](http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 13.84%
- **EPSS Percentile:** 94.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._