Internet Information Server
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Internet Information Server (e2ca0da4-4169-50aa-a181-28aef2db6269) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-0942 |
not_vulnerable | 2026-06-08 05:03:51.292615 |
Details available
Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-05-22T10:00:00.000Z
Updated: 2024-09-16T21:03:23.287Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0941 |
not_vulnerable | 2026-06-08 05:03:51.289463 |
Details available
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
Published: 2013-05-22T10:00:00.000Z
Updated: 2024-09-17T01:45:34.655Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3023 |
vulnerable | 2026-06-08 04:51:31.866984 |
Details available
Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."
Published: 2009-08-31T20:00:00.000Z
Updated: 2024-08-07T06:14:55.348Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0087 |
vulnerable | 2026-06-08 04:49:31.423310 |
Details available
Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal
Published: 2007-01-05T18:00:00.000Z
Updated: 2024-08-07T12:03:37.055Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6579 |
vulnerable | 2026-06-08 04:49:29.243399 |
Details available
Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.
Published: 2006-12-15T19:00:00.000Z
Updated: 2024-08-07T20:33:59.692Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0709 |
vulnerable | 2026-06-08 04:45:20.694763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0337 |
vulnerable | 2026-06-08 04:45:20.056702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0336 |
vulnerable | 2026-06-08 04:45:20.056485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0335 |
vulnerable | 2026-06-08 04:45:20.056236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0334 |
vulnerable | 2026-06-08 04:45:20.055966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0333 |
vulnerable | 2026-06-08 04:45:20.055559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-0115 |
vulnerable | 2026-06-08 04:44:58.392216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-1148 |
vulnerable | 2026-06-08 04:44:58.221405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0229 |
vulnerable | 2026-06-08 04:44:57.977057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.