[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2KWhfyXOwvnSBBfG2WgHYwM3ElS1gHKwegEzf4hXEHI":3,"g5a-risk:CVE-2009-1122":149},{"success":4,"data":5,"meta":147},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":47,"references":48,"referencesCount":96,"weaknesses":97,"weaknessesCount":105,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":145,"notableEvents":146},"CVE-2009-1122","What is CVE-2009-1122?","The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka \"IIS 5.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1535.","The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to...","2009-06-10T18:30:00.297","2026-06-16T23:06:33.32",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.98447,[34,34,34,34,34,34,34],"High",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"microsoft","internet_information_services","5.0","cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":32},"windows_2000","-","cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",2,[49,54,59,63,68,72,78,82,84,86,88,90,92,94],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.attrition.org\u002Fpipermail\u002Fvim\u002F2009-June\u002F002192.html","Attrition",[53],"Third Party Advisory",{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F35232","Securityfocus",[53,58],"VDB Entry",{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1022358","Securitytracker",[53,58],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA09-160A.html","Us-cert",[53,67],"US Government Resource",{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F1539","Vupen",[53],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2009\u002Fms09-020","Microsoft",[76,77],"Patch","Vendor Advisory",{"url":79,"source":80,"tags":81},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A5861","Cisecurity",[53],{"url":50,"source":51,"tags":83},[53],{"url":55,"source":56,"tags":85},[53,58],{"url":60,"source":61,"tags":87},[53,58],{"url":64,"source":65,"tags":89},[53,67],{"url":69,"source":70,"tags":91},[53],{"url":73,"source":74,"tags":93},[76,77],{"url":79,"source":80,"tags":95},[53],14,[98],{"id":99,"name":100,"description":101,"extendedDescription":27,"status":102,"abstraction":103,"structure":104},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2009-1122? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-1122, a high severity cyber security vulnerability from 2009. High exploit probability (98.4%). The WebDAV extension in Mi...","CVE-2009-1122, CVE-2009-1122 vulnerability, CVE-2009-1122 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, microsoft security, internet_information_services vulnerability, windows_2000 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2009-1122",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":10,"dateModified":11,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-1122","Cybersecurity","CVE-2009-1122, CVE-2009-1122 vulnerability, CVE-2009-1122 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133],{"Operator":134,"Negate":28,"Nodes":135},"AND",[136,141],{"Operator":137,"Negate":32,"CPEMatch":138},"OR",[139],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":140,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"413C07EA-139F-4B7D-A58B-835BD2591FA0",{"Operator":137,"Negate":32,"CPEMatch":142},[143],{"Vulnerable":32,"Criteria":46,"MatchCriteriaID":144,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5",[],[],{"lastModified":11,"cacheTime":148,"version":22},1792250269299,{"score":150,"band":36,"action":151,"scoredAt":152},70,"Patch now","2026-10-17T06:36:41.670436+00:00"]