Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:enterprise:*:*:*:*:*

part: a version: 2004 update: sp3

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductInternet Security And Acceleration Server (a78ba5e4-6877-5858-8c49-8efac83bc553)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2496 vulnerable 2026-06-08 04:51:28.941582 Details available
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability."
Published: 2009-08-12T17:00:00.000Z
Updated: 2024-08-07T05:52:14.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0237 vulnerable 2026-06-08 04:51:08.480519 Details available
Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote attackers to inject arbitrary web script or HTML via "authentication input" to this component, aka "Cross-Site Scripting Vulnerability."
Published: 2009-04-15T03:49:00.000Z
Updated: 2024-08-07T04:24:18.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0077 vulnerable 2026-06-08 04:51:07.577048 Details available
The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a denial of service (many stale sessions) via crafted packets, aka "Web Proxy TCP State Limited Denial of Service Vulnerability."
Published: 2009-04-15T03:49:00.000Z
Updated: 2024-08-07T04:24:16.985Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.