CVE-2006-7027: Microsoft Isa Server

High severity, CVSS 10.0. EPSS: 15.3% chance of exploitation in the next 30 days.

Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.

Affected products

• Microsoft Isa Server: version 2004 only

Published 2007-02-23. Last modified 2026-06-16.