Microsoft Internet Information Server (IIS) -
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:internet_information_services:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Internet Information Services (cf577158-daa2-5ed0-a41f-5adab89c3913) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-3332 |
not_vulnerable | 2026-06-08 04:55:14.197463 |
Details available
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability."
Published: 2010-09-22T18:00:00.000Z
Updated: 2024-08-07T03:03:18.963Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4301 |
vulnerable | 2026-06-08 04:50:38.540544 |
Details available
A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable. Therefore the original disclosure is probably erroneous
Published: 2008-09-29T17:00:00.000Z
Updated: 2024-08-07T10:08:35.068Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4300 |
vulnerable | 2026-06-08 04:50:38.540148 |
Details available
A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
Published: 2008-09-29T17:00:00.000Z
Updated: 2024-08-07T10:08:35.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5858 |
not_vulnerable | 2026-06-08 04:49:21.477563 |
Details available
Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.
Published: 2007-01-10T02:00:00.000Z
Updated: 2024-08-07T20:04:55.769Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.