CS
Product
Commerce Server
by Microsoft · last CVE Aug 15, 2012
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add Commerce Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2012-1856
In wildKEV
8.8
72%
Aug 15
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
Affected: 2002; 2007; 2009; 2009
CVE-2012-0158
RansomwareIn wildKEV
8.8
100%
Apr 10
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
Affected: 2002; 2007
CVE-2007-1201
–
29%
Mar 11
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to…
Affected: 2000
CVE-2006-1257
–
30%
Mar 19
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with…
Affected: 2002; 2002
CVE-2002-0620
–
15%
Jul 3
Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security…
Affected: 2000; 2000; 2000
CVE-2002-0621
–
17%
Jul 3
Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary…
Affected: 2000; 2000; 2000
CVE-2002-0622
–
19%
Jul 3
The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC…
Affected: 2000; 2000; 2000
CVE-2002-0623
–
20%
Jul 3
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New…
Affected: 2000; 2000; 2000; 2002
CVE-2002-0050
–
13%
Mar 8
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data
Affected: 2000
Showing 9