[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh0_Y3HAN_ZKUl7lCo0TYEZWEQRMg96RWFcCsvFDSdr8":3,"g5a-risk:CVE-2006-4685":166},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":53,"references":54,"referencesCount":109,"weaknesses":110,"weaknessesCount":114,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":115,"seoMetadata":116,"configurations":141,"relatedVendorCves":155,"notableEvents":156},"CVE-2006-4685","What is CVE-2006-4685?","The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.","The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allo...","2006-10-10T22:07:00","2026-06-16T22:29:35.473",2.6,"AV:N\u002FAC:H\u002FAu:N\u002FC:P\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","HIGH","NONE","PARTIAL","",null,"LOW",4.9,2.9,false,[],0.20701,[34,34,34,34,34,34,34],"Low",[38,43,46,49],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"microsoft","xml_core_services","3.0","cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"4.0","cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"6.0","cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*",{"vendor":39,"product":50,"version":51,"criteria":52,"vulnerable":4},"xml_parser","2.6","cpe:2.3:a:microsoft:xml_parser:2.6:*:*:*:*:*:*:*",4,[55,59,63,68,72,76,79,83,87,91,93,95,97,99,101,103,105,107],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F22333","Secunia",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1017033","Securitytracker",[],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F547212","Cert",[67],"US Government Resource",{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.osvdb.org\u002F29425","Osvdb",[],{"url":73,"source":74,"tags":75},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F449179\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":77,"source":74,"tags":78},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F20339",[],{"url":80,"source":81,"tags":82},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2006\u002F3980","Vupen",[],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2006\u002Fms06-061","Microsoft",[],{"url":88,"source":89,"tags":90},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A221","Cisecurity",[],{"url":56,"source":57,"tags":92},[],{"url":60,"source":61,"tags":94},[],{"url":64,"source":65,"tags":96},[67],{"url":69,"source":70,"tags":98},[],{"url":73,"source":74,"tags":100},[],{"url":77,"source":74,"tags":102},[],{"url":80,"source":81,"tags":104},[],{"url":84,"source":85,"tags":106},[],{"url":88,"source":89,"tags":108},[],18,[111],{"id":112,"name":112,"description":113},"Unknown","NVD-CWE-Other",1,[],{"title":117,"metaDescription":118,"keywords":119,"canonicalUrl":120,"structuredData":121},"What is CVE-2006-4685? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2006-4685, a low severity cyber security vulnerability from 2006. The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and X...","CVE-2006-4685, CVE-2006-4685 vulnerability, CVE-2006-4685 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2006, CVSS score, exploit, patch, remediation, microsoft security, xml_core_services vulnerability, xml_parser vulnerability","\u002Fwhat-is\u002Fcve-2006-4685",{"@context":122,"@type":123,"headline":117,"description":118,"datePublished":10,"dateModified":11,"author":124,"publisher":128,"about":132,"mainEntityOfPage":136,"articleSection":139,"keywords":140},"https:\u002F\u002Fschema.org","TechArticle",{"@type":125,"name":126,"url":127},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":125,"name":126,"url":127,"logo":129},{"@type":130,"url":131},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":133,"name":6,"description":134,"additionalType":135},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":137,"@id":138},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2006-4685","Cybersecurity","CVE-2006-4685, CVE-2006-4685 vulnerability, CVE-2006-4685 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[142],{"Operator":28,"Negate":28,"Nodes":143},[144],{"Operator":145,"Negate":32,"CPEMatch":146},"OR",[147,149,151,153],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":148,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"73052210-0B42-46AA-9F28-AAE3E9B6DE87",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":150,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"3C9B9BE3-6F83-469E-834F-3E00CFECD8E2",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":152,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4170FCB7-274C-4318-B7A1-8F18DE604A2D",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":154,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"2EFB71BA-3DF5-4CD4-9C64-33E51840E143",[],[157],{"id":158,"eventType":159,"eventTime":160,"details":161,"label":162,"color":163},"1b1febcf-da49-45a3-91a0-a6cfa080efa7","LOW_EPSS_DELTA","2026-06-16T04:07:12.523891+00:00","Daily EPSS score decreased by 0.360 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":165,"version":22},1792352639861,{"score":167,"band":168,"action":169,"scoredAt":170},19,"Info","Track","2026-10-17T06:34:30.673817+00:00"]