microsoft internet information server

Name: microsoft internet information server
Brand: microsoft

productUS

cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical41high61medium5low

updated 2026-10-28

vulnerabilities (107)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2001-0500US	high10.0	96.7% (100th)	Exploit	no fix	2001-07-21	≤ 6.0
CVE-2009-3023US	high9.0	90.9% (100th)	Exploit	no fix	2009-08-31	5.0 → 6.0
CVE-2001-0333US	high7.5	90.8% (100th)	Exploit	no fix	2001-06-27	2 versions
CVE-2006-0026US	medium6.5	89.3% (100th)	Exploit	no fix	2006-07-11	= 6.0
CVE-2003-0718US	medium5.0	87.9% (100th)	Exploit	no fix	2004-11-03	= 6.0
CVE-2000-0246US	medium5.0	80.0% (100th)	Exploit	no fix	2000-03-30	= 4.0
CVE-2002-0079US	high7.5	78.0% (100th)	Exploit	no fix	2002-04-22	= 4.0
CVE-1999-1011US	high10.0	77.1% (100th)	Exploit	no fix	1999-07-19	2 versions
CVE-2000-0649US	low2.6	76.6% (100th)	Exploit	no fix	2000-07-13	2 versions
CVE-1999-0874US	high10.0	74.7% (99th)	Exploit	no fix	1999-06-16	= 4.0
CVE-2001-1243US	medium5.0	70.5% (99th)	Exploit	no fix	2001-07-04	= 4.0
CVE-2001-0506US	high7.2	68.9% (99th)	Exploit	no fix	2001-09-20	= 4.0
CVE-2000-0886US	high7.5	68.7% (99th)	Exploit	no fix	2000-12-19	= 4.0
CVE-2000-0630US	medium5.0	68.2% (99th)	Exploit	no fix	2000-07-17	= 4.0
CVE-2002-0148US	high7.5	65.5% (99th)	Exploit	no fix	2002-04-22	= 4.0
CVE-1999-0278US	medium5.0	64.8% (99th)	Exploit	no fix	1998-06-01	2 versions
CVE-2000-0884US	high7.5	63.3% (99th)	Exploit	no fix	2000-12-19	= 4.0
CVE-2000-0408US	medium5.0	58.0% (99th)	Exploit	no fix	2000-05-11	= 4.0
CVE-2010-1899US	medium4.3	57.2% (99th)	Exploit	no fix	2010-09-15	= 6.0
CVE-1999-0191US	medium6.4	53.3% (99th)	Exploit	no fix	1997-09-01	= 3.0
CVE-2000-0457US	high7.5	52.8% (99th)	Exploit	no fix	2000-05-11	= 4.0
CVE-2000-0114US	medium5.0	47.6% (99th)	Exploit	no fix	2000-02-02	2 versions
CVE-2000-0126US	medium5.0	45.7% (99th)	Exploit	no fix	2000-01-26	2 versions
CVE-1999-0736US	medium5.0	44.8% (99th)	Exploit	no fix	1999-05-07	= 4.0
CVE-2000-0413US	medium5.0	43.9% (99th)	Exploit	no fix	2000-05-06	= 4.0
CVE-1999-0154US	medium5.0	40.0% (99th)	Exploit	no fix	1999-12-31	= 3.0
CVE-2002-0419US	medium5.0	37.3% (99th)	Exploit	no fix	2002-08-12	= 4.0
CVE-2002-1790US	medium5.0	34.0% (98th)	Exploit	no fix	2002-12-31	= 4.0
CVE-1999-1375US	medium5.0	30.5% (98th)	Exploit	no fix	1999-02-11	2 versions
CVE-1999-1538US	low2.1	25.3% (98th)	Exploit	no fix	1999-01-14	= 4.0
CVE-1999-0725US	high7.1	24.9% (98th)	Exploit	no fix	1999-08-19	2 versions
CVE-1999-0448US	medium5.0	24.6% (98th)	Exploit	no fix	1999-01-01	= 4.0
CVE-1999-0867US	medium5.0	21.5% (98th)	Exploit	no fix	1999-08-11	= 4.0
CVE-1999-0450US	high7.5	19.0% (97th)	Exploit	no fix	1999-01-26	2 versions
CVE-2001-0336US	medium5.0	15.9% (97th)	Exploit	no fix	2001-06-27	≤ 5.0
CVE-1999-0281US	medium5.0	12.8% (96th)	Exploit	no fix	1997-06-01	= 3.0
CVE-1999-0412US	high7.5	10.2% (96th)	Exploit	no fix	1999-02-19	2 versions
CVE-2000-1147US	medium4.6	7.88% (95th)	Exploit	no fix	2001-01-09	= 4.0
CVE-2000-0167US	low2.1	2.71% (86th)	Exploit	no fix	2000-02-15	= 4.0
CVE-2007-2897US	high7.5	74.0% (99th)	—	no fix	2007-05-30	= 6.0
CVE-2002-0149US	high7.5	68.8% (99th)	—	no fix	2002-04-22	= 4.0
CVE-2002-0147US	high7.5	68.0% (99th)	—	no fix	2002-04-22	= 4.0
CVE-2002-0072US	medium5.0	63.5% (99th)	—	no fix	2002-04-22	= 4.0
CVE-2002-0073US	medium5.0	59.7% (99th)	—	no fix	2002-04-22	= 4.0
CVE-2008-0075US	high10.0	57.2% (99th)	—	no fix	2008-02-12	= 6.0
CVE-2002-0150US	high7.5	52.9% (99th)	—	no fix	2002-04-22	= 4.0
CVE-1999-0449US	high7.8	49.3% (99th)	—	no fix	1999-01-26	= 4.0
CVE-2000-0970US	high7.5	45.7% (99th)	—	no fix	2000-12-19	= 4.0
CVE-2005-2678US	medium5.0	41.8% (99th)	—	no fix	2005-08-23	= 6.0
CVE-2002-1181US	medium6.8	39.4% (99th)	—	no fix	2002-11-12	= 4.0

showing 50 of 107

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor27 CVEs
CWE-20Improper Input Validation23 CVEs
CWE-400Uncontrolled Resource Consumption23 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer16 CVEs
CWE-284Improper Access Control12 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-287Improper Authentication4 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE107 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan