Microsoft Indexing Service vulnerabilities

4 CVEs affecting Microsoft Indexing Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-0500, published 2001-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2001-0500, published 2001-07-21. High severity, CVSS 10.0. EPSS: 96.7% chance of exploitation in the next 30 days. Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to…
CVE-2000-0942, published 2000-12-19. Medium severity, CVSS 5.1. EPSS: 22.4% chance of exploitation in the next 30 days. The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka…
CVE-2001-0245, published 2001-06-27. Medium severity, CVSS 5.0. EPSS: 14.3% chance of exploitation in the next 30 days. Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the…
CVE-2000-1105, published 2001-01-09. Medium severity, CVSS 4.3. EPSS: 10.8% chance of exploitation in the next 30 days. The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000…