IS
Product
Isa Server
21
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Isa Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2001-1533 | 5.3 | Dec 31 | Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets Affected: 2000 |
| CVE-2009-1534 | – | Aug 12 | Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and… Affected: 2004; 2004; 2006; 2006 |
| CVE-2009-0562 | – | Aug 12 | The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1… Affected: 2004; 2004; 2006; 2006 |
| CVE-2009-1136 | – | Jul 15 | The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office… Affected: 2004; 2004; 2006; 2006; 2006 |
| CVE-2009-1135 | – | Jul 15 | Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers… Affected: 2006; 2006; 2006 |
| CVE-2007-4991 | – | Sep 21 | The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination… Affected: 2004; 2004 |
| CVE-2006-7027 | – | Feb 23 | Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate… Affected: 2004 |
| CVE-2006-3652 | – | Jul 18 | Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character Affected: 2004 |
| CVE-2006-1651 | – | Apr 6 | Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets Affected: 2004 |
| CVE-2005-1216 | – | Jun 14 | Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all)… Affected: 2000 |
| CVE-2005-1215 | – | Jun 14 | Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple… Affected: 2000 |
| CVE-2005-1907 | – | May 31 | The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large… Affected: 2000 |
| CVE-2004-0892 | – | Jan 27 | Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers… Affected: 2000; 2000; 2000 |
| CVE-2003-0526 | – | Aug 18 | Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL… Affected: 2000; 2000; 2000 |
| CVE-2003-0110 | – | May 5 | The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause… Affected: 2000; 2000; 2000 |
| CVE-2003-0011 | – | Mar 24 | Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a… Affected: 2000; 2000 |
| CVE-2002-0371 | – | Jul 3 | Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a… Affected: 2000; 2000 |
| CVE-2001-0546 | – | Sep 20 | Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource… Affected: 2000 |
| CVE-2001-0658 | – | Sep 20 | Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script… Affected: 2000 |
| CVE-2001-0547 | – | Sep 20 | Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion) Affected: 2000 |
| CVE-2001-0239 | – | Jul 2 | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type Affected: 2000 |
Showing 21