CVE-2000-0439: Microsoft Internet Explorer

Low severity, CVSS 2.6. EPSS: 6.2% chance of exploitation in the next 30 days.

Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.

Affected products

• Microsoft Internet Explorer: version 3.0 only; version 3.2 only; version 4.0 only; version 4.0.1 only; version 4.1 only; version 5.0 only

Published 2000-05-11. Last modified 2026-06-16.