CCE-44448-9Platform: cpe:/o:microsoft:windows_10 | Date: (C)2016-09-23 (M)2023-07-04 |
Specify the 'Configure the Enterprise Mode Site List' (SiteList)
This setting lets you configure whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy websites.
Turning this setting on lets Microsoft Edge look for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.
Turning this setting off, or not configuring it, stops Microsoft Edge from using the Enterprise Mode Site List file. In this case, employees might experience compatibility problems while using legacy websites.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
Disabling this setting may cause users to experience compatibility issues with Internet Explorer 11. Enabling this setting may cause malware intended for previous versions of Internet Explorer to affect the device.
Parameter:
[sitelist]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft EdgeConfigure the Enterprise Mode Site List
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftMicrosoftEdgeMainEnterpriseModeSiteList
CCSS Severity: | CCSS Metrics: |
CCSS Score : 7.8 | Attack Vector: LOCAL |
Exploit Score: 1.8 | Attack Complexity: LOW |
Impact Score: 5.9 | Privileges Required: LOW |
Severity: HIGH | User Interaction: NONE |
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35461 |