CS
Product
Commerce Server
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Commerce Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1856 In wildKEV | 8.8 | Aug 15 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 2002; 2007; 2009; 2009 |
| CVE-2012-0158 RansomwareIn wildKEV | 8.8 | Apr 10 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 2002; 2007 |
| CVE-2007-1201 | – | Mar 11 | Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to… Affected: 2000 |
| CVE-2006-1257 | – | Mar 19 | The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with… Affected: 2002; 2002 |
| CVE-2002-0620 | – | Jul 3 | Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security… Affected: 2000; 2000; 2000 |
| CVE-2002-0621 | – | Jul 3 | Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary… Affected: 2000; 2000; 2000 |
| CVE-2002-0622 | – | Jul 3 | The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC… Affected: 2000; 2000; 2000 |
| CVE-2002-0623 | – | Jul 3 | Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New… Affected: 2000; 2000; 2000; 2002 |
| CVE-2002-0050 | – | Mar 8 | Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data Affected: 2000 |
Showing 9
