CWE-623: Unsafe ActiveX Control Marked Safe For Scripting
Filter
The product includes an ActiveX control that is intended for restricted use, but the control has been marked as safe-for-scripting.
What the weakness is: CWE-623 at MITRE. All weaknesses
Ask an AI about CWE-623
Show the prompt
Explain CWE-623: Unsafe ActiveX Control Marked Safe For Scripting and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/623.html and https://cve.bz/cve/cwe/623?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.7CVE-2011-10028ExploitEPSS 1.7%
The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary comm…
- 4.8CVE-2018-17925EPSS 0.3%
Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to GE iFIX versions 2.0 - 5.8 by Gigasoft. Only the independent use of the Gigasoft…
- –CVE-2014-2368EPSS 1.7%
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.