[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZ9UaTAv2eoqIw4qQLyQoTpPXvLRRCNzORPxwz4epqTM":3,"g5a-family:microsoft\u002Finternet_information_services":145,"g5a-ex:microsoft\u002Finternet_information_services@*":146},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":59,"kevVulnerabilities":118,"seoMetadata":124,"meta":143},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"microsoft","internet_information_services",12,93,1,"2017-03-27",[14,19,21,24,26,28,31,34,37,39,41,43],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",3,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"10.0",{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},"2.0",7,{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},"3.0",{"version":27,"cve_count":11,"kev_count":17,"has_kev":18},"4.0",{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"5.0",70,{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},"5.1",5,{"version":35,"cve_count":36,"kev_count":11,"has_kev":4},"6.0",4,{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"7.0",{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},"7.5",{"version":42,"cve_count":11,"kev_count":17,"has_kev":18},"8.0",{"version":44,"cve_count":11,"kev_count":17,"has_kev":18},"8.5","Internet Information Services by Microsoft is a technology product with 12 tracked versions and 93 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57,58],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},{"version":27,"cve_count":11,"kev_count":17,"has_kev":18},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":11,"has_kev":4},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},{"version":42,"cve_count":11,"kev_count":17,"has_kev":18},{"version":44,"cve_count":11,"kev_count":17,"has_kev":18},[60,67,75,79,85,92,97,102,108,113],{"cveId":61,"description":62,"publishedDate":12,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":4,"epssScore":66},"CVE-2017-7269","Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with \"If: \u003Chttp:\u002F\u002F\" in a PROPFIND request, as exploited in the wild in July or August 2016.",9.8,"v3.1","Critical",0.99823,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":18,"epssScore":74},"CVE-2009-1122","The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka \"IIS 5.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1535.","2009-06-10",7.5,"v2","High",0.98447,{"cveId":76,"description":77,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":18,"epssScore":78},"CVE-2009-1535","The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode \u002F character) at an arbitrary position in the URI, as demonstrated by inserting %c0%af into a \"\u002Fprotected\u002F\" initial pathname component to bypass the password protection on the protected\\ folder, aka \"IIS 5.1 and 6.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1122.",0.98115,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":72,"severity":65,"isKev":18,"epssScore":84},"CVE-2010-3972","Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka \"IIS FTP Service Heap Buffer Overrun Vulnerability.\" NOTE: some of these details are obtained from third party information.","2010-12-23",10,0.94534,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":72,"severity":90,"isKev":18,"epssScore":91},"CVE-2006-0026","Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP).","2006-07-11",6.5,"Medium",0.89259,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":33,"cvssVersion":72,"severity":90,"isKev":18,"epssScore":96},"CVE-2003-0718","The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.","2004-11-03",0.87908,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":33,"cvssVersion":72,"severity":90,"isKev":18,"epssScore":101},"CVE-2000-0778","IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a \"Translate: f\" header, aka the \"Specialized Header\" vulnerability.","2000-10-20",0.87284,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":72,"severity":73,"isKev":18,"epssScore":107},"CVE-2005-4360","The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to \".dll\" followed by arguments such as \"~0\" through \"~9\", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using \"\u002F_vti_bin\u002F.dll\u002F*\u002F~0\".  NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).","2005-12-20",7.8,0.86729,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":33,"cvssVersion":72,"severity":90,"isKev":18,"epssScore":112},"CVE-2009-2521","Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka \"IIS FTP Service DoS Vulnerability.\"","2009-09-04",0.82265,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":33,"cvssVersion":72,"severity":90,"isKev":18,"epssScore":117},"CVE-2000-0246","IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the \"Virtualized UNC Share\" vulnerability.","2000-03-30",0.79976,[119],{"cveId":61,"description":62,"publishedDate":12,"cvssScore":63,"severity":65,"isKev":4,"epssScore":66,"cisaVulnName":120,"cisaDateAdded":121,"cisaShortDescription":122,"cisaRequiredAction":123},"Microsoft Windows Server Buffer Overflow Vulnerability","2021-11-03","Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with \"If: \u003Chttp:\u002F\u002F\" in a PROPFIND request.","Apply updates per vendor instructions.",{"title":125,"metaDescription":126,"keywords":127,"structuredData":128},"Internet Information Services by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Internet Information Services by Microsoft covering 12 versions with 93 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Internet Information Services vulnerabilities, Internet Information Services security, Internet Information Services CVE, Microsoft Internet Information Services, Internet Information Services threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Internet Information Services KEV, Internet Information Services exploited vulnerabilities",{"@context":129,"@type":130,"name":131,"description":126,"url":132,"manufacturer":133,"applicationCategory":137,"softwareVersion":138,"mainEntity":139},"https:\u002F\u002Fschema.org","SoftwareApplication","Internet Information Services","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Finternet_information_services",{"@type":134,"name":135,"url":136},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","12 versions tracked",{"@type":140,"name":141,"description":142,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Internet Information Services Security Vulnerabilities","Security vulnerabilities affecting Internet Information Services by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":144,"apiVersion":25},"2026-10-17T03:42:16.410Z",[],{"rows":147,"total":11,"capped":18,"failed":17},[148],{"cveId":61,"name":120,"severity":65,"cvss":63,"added":121,"epss":66,"published":149,"ranges":150,"checked":4,"hits":151,"covers":18},"2017-03-27T02:59:00.453",[35],[]]