[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVlnjuRaTjpohyQKbQSadnBObDLMjiX1sRn8KembDCmM":3,"g5a-ex:microsoft\u002Finternet_information_server@*":140,"g5a-family:microsoft\u002Finternet_information_server":142},{"success":4,"data":5},true,{"product":6,"versions":44,"topVulnerabilitiesByEpss":57,"kevVulnerabilities":118,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":43},"microsoft","internet_information_server",12,111,0,"2013-05-22",[14,17,19,21,24,27,30,32,35,37,39,41],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"10.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"2.0",{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},"3.0",24,{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},"4.0",83,{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},"5.0",1,{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},"5.1",{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},"6.0",10,{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"7.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"7.5",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"8.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"8.5","Internet Information Server by Microsoft is a technology product with 12 tracked versions and 111 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[45,46,47,48,49,50,51,52,53,54,55,56],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},[58,65,71,78,85,91,96,101,106,113],{"cveId":59,"description":60,"publishedDate":61,"cvssScore":34,"cvssVersion":62,"severity":63,"isKev":16,"epssScore":64},"CVE-2001-0500","Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.","2001-07-21","v2","Critical",0.96731,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":62,"severity":63,"isKev":16,"epssScore":70},"CVE-2009-3023","Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka \"IIS FTP Service RCE and DoS Vulnerability.\"","2009-08-31",9,0.90913,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":62,"severity":76,"isKev":16,"epssScore":77},"CVE-2001-0333","Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and \"\\\" characters twice.","2001-06-27",7.5,"High",0.9077,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":62,"severity":83,"isKev":16,"epssScore":84},"CVE-2006-0026","Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP).","2006-07-11",6.5,"Medium",0.89259,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":62,"severity":83,"isKev":16,"epssScore":90},"CVE-2003-0718","The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.","2004-11-03",5,0.87908,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":89,"cvssVersion":62,"severity":83,"isKev":16,"epssScore":95},"CVE-2000-0246","IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the \"Virtualized UNC Share\" vulnerability.","2000-03-30",0.79976,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":75,"cvssVersion":62,"severity":76,"isKev":16,"epssScore":100},"CVE-2002-0079","Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.","2002-04-22",0.77341,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":34,"cvssVersion":62,"severity":63,"isKev":16,"epssScore":105},"CVE-1999-1011","The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.","1999-07-19",0.7714,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":62,"severity":111,"isKev":16,"epssScore":112},"CVE-2000-0649","IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.","2000-07-13",2.6,"Low",0.76558,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":34,"cvssVersion":62,"severity":63,"isKev":16,"epssScore":117},"CVE-1999-0874","Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.","1999-06-16",0.74651,[],{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Internet Information Server by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Internet Information Server by Microsoft covering 12 versions with 111 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Internet Information Server vulnerabilities, Internet Information Server security, Internet Information Server CVE, Microsoft Internet Information Server, Internet Information Server threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Internet Information Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Finternet_information_server",{"@type":129,"name":130,"url":131},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","12 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Internet Information Server Security Vulnerabilities","Security vulnerabilities affecting Internet Information Server by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":22},"2026-10-17T03:42:16.313Z",{"rows":141,"total":11,"capped":16,"failed":11},[],[]]