SS
Product
Site Server Commerce
by Microsoft · last CVE Dec 31, 2002
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Site Server Commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2002-1769
–
12%
Dec 31
Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally"…
Affected: 3.0; 3.0; 3.0; 3.0; 3.0
CVE-2002-2081
–
15%
Dec 31
cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which…
Affected: 3.0; 3.0; 3.0; 3.0; 3.0; 3.0
CVE-2002-2073
–
13%
Dec 31
Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 3.0
CVE-2000-0246
–
80%
Mar 30
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP…
Affected: 3.0
CVE-2000-0025
–
35%
Dec 21
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh,…
Affected: 3.0
CVE-2000-0024
–
12%
Dec 21
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape…
Affected: 3.0
CVE-1999-0910
–
6%
Sep 10
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user
Affected: 3.0
CVE-1999-0861
–
3%
Aug 11
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext
Affected: 3.0
Showing 8