Microsoft Iis Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

4.0	102
5.0	88
5.1	34
3.0	20
6.0	12

Remediation

Official Fix	168
Temporary Fix	0
Workaround	8
Unavailable	2
Not Defined	14

Exploitability

High	20
Functional	0
Proof-of-Concept	50
Unproven	2
Not Defined	120

Access Vector

Not Defined	0
Physical	0
Local	16
Adjacent	0
Network	176

Authentication

Not Defined	0
High	0
Low	24
None	168

User Interaction

Not Defined	0
Required	18
None	174

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	10
≤5	14
≤6	94
≤7	18
≤8	44
≤9	2
≤10	10

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	14
≤5	30
≤6	88
≤7	34
≤8	16
≤9	4
≤10	6

VulDB

≤1	0
≤2	0
≤3	0
≤4	10
≤5	16
≤6	92
≤7	18
≤8	44
≤9	2
≤10	10

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	2
≤8	2
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	0
<10k	8
<25k	102
<50k	64
<100k	18
≥100k	0

Exploit Today

<1k	176
<2k	0
<5k	4
<10k	8
<25k	4
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (19): 1.0, 2.0, 2.5, 3.0, 4.0, 5.0, 5.06, 5.1, 6, 6.0, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 8.0, 8.5, 10

Link to Product Website: https://www.microsoft.com/

Software Type: Web Server

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
03/10/2020	7.4	7.1	Microsoft IIS input validation	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.06	CVE-2020-0645
06/11/2019	6.8	6.5	Microsoft IIS Request Filter data processing	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2019-0941
03/27/2017	8.5	8.4	Microsoft IIS WebDAV ScStoragePathFromUrl Immortal/ExploidingCan memory corruption	$25k-$100k	$0-$5k	High	Official Fix	0.00	CVE-2017-7269
03/14/2017	5.2	4.7	Microsoft IIS cross site scripting	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.24	CVE-2017-0055
05/10/2016	7.8	7.6	Microsoft IIS DLL Loader access control	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-0152
11/28/2014	4.3	4.1	Microsoft IIS Error Message mypage cross site scripting	$5k-$25k	$0-$5k	High	Workaround	0.04
11/11/2014	6.5	5.7	Microsoft IIS IP/Domain Restriction access control	$25k-$100k	$0-$5k	Unproven	Official Fix	0.41	CVE-2014-4078
04/23/2014	6.5	6.5	Microsoft IIS input validation	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.04	CVE-2011-5279
11/13/2012	5.3	4.8	Microsoft IIS FTP Command information disclosure	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.03	CVE-2012-2532
11/13/2012	5.3	4.8	Microsoft IIS Log File Permission information disclosure	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.05	CVE-2012-2531
06/30/2012	6.5	5.9	Microsoft IIS File Name Tilde privileges management	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.03	CVE-2005-4360
12/22/2010	7.5	7.2	Microsoft IIS FTP Server memory corruption	$25k-$100k	$0-$5k	High	Official Fix	0.03	CVE-2010-3972
09/15/2010	7.3	7.0	Microsoft IIS Access Restriction improper authentication	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2010-2731
09/14/2010	5.9	5.7	Microsoft IIS memory corruption	$25k-$100k	$0-$5k	High	Official Fix	0.07	CVE-2010-1899
09/14/2010	7.3	7.0	Microsoft IIS FastCGI memory corruption	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2010-2730
06/08/2010	9.9	9.9	Microsoft IIS code injection	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.03	CVE-2010-1256
02/05/2010	4.3	4.3	Microsoft IIS cross site scripting	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2003-1582
12/29/2009	6.3	6.0	Microsoft IIS asp:.jpg input validation	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2009-4445
12/24/2009	5.4	5.1	Microsoft IIS ASP input validation	$25k-$100k	$0-$5k	Proof-of-Concept	Unavailable	0.03	CVE-2009-4444
09/04/2009	7.5	7.2	Microsoft IIS FTP Server resource management	$5k-$25k	$0-$5k	High	Official Fix	0.03	CVE-2009-2521
06/10/2009	8.1	7.7	Microsoft IIS improper authentication	$25k-$100k	$0-$5k	High	Official Fix	0.04	CVE-2009-1122
06/10/2009	8.1	7.7	Microsoft IIS Password Protection improper authentication	$25k-$100k	$0-$5k	High	Official Fix	0.04	CVE-2009-1535
09/29/2008	9.8	9.8	Microsoft iis ActiveX Control iisext.dll credentials management	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.04	CVE-2008-4301
09/29/2008	5.3	5.3	Microsoft iis ActiveX Control adsiis.dll input validation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2008-4300
02/12/2008	10.0	9.0	Microsoft IIS code injection	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.03	CVE-2008-0075