CWE-618
Exposed Unsafe ActiveX Method
An ActiveX control is intended for use in a web browser, but it exposes dangerous methods that perform actions that are outside of the browser's security model (e.g. the zone or domain).
Impactr finds and proves whether CWE-618 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.