Weakness (CWE)

CWE-623: Unsafe ActiveX Control Marked Safe For Scripting

Variant Draft

The product includes an ActiveX control that is intended for restricted use, but the control has been marked as safe-for-scripting.

How to prevent it (2 mitigations)

Architecture and Design

During development, do not mark it as safe for scripting.
System Configuration

After distribution, you can set the kill bit for the control so that it is not accessible from Internet Explorer.

Nothing found.