Product by Microsoft

Microsoft Internet Information Services (IIS)

91 known vulnerabilities in Microsoft Internet Information Services (IIS) (Microsoft), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Microsoft Internet Information Services (IIS) (Microsoft)

Critical	CVE-2017-7269	Microsoft Windows Server Buffer Overflow Vulnerability In CISA KEV	9.8	27.03.2017
High	CVE-2003-1567	Microsoft Internet Information Services (IIS): security vulnerability	7.5	15.01.2009
High	CVE-2000-0258	Microsoft Internet Information Server: Denial of Service also in 1 other product	7.5	02.06.2000
High	CVE-2002-1745	Microsoft Internet Information Services (IIS): security vulnerability	7.5	21.06.2005
Not rated	CVE-2009-1122	Microsoft Internet Information Services (IIS): Authentication Bypass	—	10.06.2009
Not rated	CVE-2009-1535	Microsoft Internet Information Services (IIS): Authentication Bypass	—	10.06.2009
Not rated	CVE-2010-3972	Microsoft Internet Information Services (IIS): Heap-Based Buffer Overflow	—	23.12.2010
Not rated	CVE-2006-0026	Microsoft Internet Information Services (IIS): Buffer Overflow also in 1 other product	—	11.07.2006
Not rated	CVE-2003-0718	Microsoft Internet Information Services (IIS): Denial of Service also in 1 other product	—	16.10.2004
Not rated	CVE-2000-0778	Microsoft Internet Information Services (IIS): security vulnerability	—	13.10.2000
Not rated	CVE-2005-4360	Microsoft Internet Information Services (IIS): Denial of Service	—	20.12.2005
Not rated	CVE-2009-2521	Microsoft Internet Information Services (IIS): Denial of Service	—	04.09.2009
Not rated	CVE-2000-0246	Microsoft commercial_internet_system: security vulnerability also in 5 other products	—	02.06.2000
Not rated	CVE-2002-0079	Microsoft Internet Information Server: Buffer Overflow also in 1 other product	—	02.04.2003
Not rated	CVE-2000-0649	Microsoft Internet Information Server: security vulnerability also in 1 other product	—	03.08.2000
Not rated	CVE-2007-2815	Microsoft Internet Information Services (IIS): security vulnerability	—	22.05.2007
Not rated	CVE-2001-1243	Microsoft Internet Information Server: Denial of Service also in 1 other product	—	03.05.2002
Not rated	CVE-2002-0149	Microsoft Internet Information Server: Buffer Overflow also in 1 other product	—	02.04.2003
Not rated	CVE-2001-0506	Microsoft Internet Information Server: Buffer Overflow also in 1 other product	—	09.03.2002
Not rated	CVE-2000-0886	Microsoft Internet Information Server: security vulnerability also in 1 other product	—	22.01.2001
Not rated	CVE-2000-0630	Microsoft Internet Information Server: security vulnerability also in 1 other product	—	13.10.2000
Not rated	CVE-2002-0147	Microsoft Internet Information Server: Buffer Overflow also in 1 other product	—	02.04.2003
Not rated	CVE-2001-0151	Microsoft Internet Information Services (IIS): Denial of Service	—	07.05.2001
Not rated	CVE-2002-0148	Microsoft Internet Information Server: Cross-Site Scripting (XSS) also in 1 other product	—	02.04.2003
Not rated	CVE-2002-1744	Microsoft Internet Information Services (IIS): Path Traversal	—	21.06.2005

All vulnerabilities in search

All products by Microsoft

Key figures

Vulnerabilities