Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:isa_server:2006:supportability:*:*:*:*:*:*

part: a version: 2006 update: supportability

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductIsa Server (58a0dfeb-5d71-53bd-93bc-8a463be41d63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1136 vulnerable 2026-06-08 04:51:13.171415 Details available
The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability."
Published: 2009-07-15T15:00:00.000Z
Updated: 2024-08-07T05:04:47.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1135 vulnerable 2026-06-08 04:51:13.170735 Details available
Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
Published: 2009-07-15T15:00:00.000Z
Updated: 2024-08-07T05:04:48.291Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.