CVE-1999-0233: Microsoft Internet Information Services

High severity, CVSS 10.0. EPSS: 16.3% chance of exploitation in the next 30 days.

IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.

Affected products

• Microsoft Internet Information Services: version 1.0 only

Published 1996-02-25. Last modified 2026-06-16.