Microsoft Iis الثغرات

التسلسل الزمني

النسخة

4.086
5.078
5.130
3.025
6.015

معالجة

Official Fix159
Temporary Fix0
Workaround14
Unavailable1
Not Defined18

قابلية الاستغلال

High23
Functional0
Proof-of-Concept43
Unproven1
Not Defined125

متجه الوصول

Not Defined0
Physical0
Local23
Adjacent2
Network167

توثيق

Not Defined0
High0
Low27
None165

تفاعل المستخدم

Not Defined0
Required16
None176

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤415
≤519
≤686
≤714
≤837
≤95
≤1016

CVSSv3 Temp

≤10
≤20
≤31
≤420
≤529
≤679
≤729
≤817
≤94
≤1013

VulDB

≤10
≤20
≤30
≤415
≤520
≤686
≤713
≤838
≤94
≤1016

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤84
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k0
<2k0
<5k0
<10k7
<25k94
<50k77
<100k14
≥100k0

إكسبلويت اليوم

<1k174
<2k2
<5k4
<10k5
<25k7
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Versions (19): 1.0, 2.0, 2.5, 3.0, 4.0, 5.0, 5.06, 5.1, 6, 6.0, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 8.0, 8.5, 10

Link to Product Website: https://www.microsoft.com/

نوع البرنامج: Web Server

منشورBaseTempالثغرة0dayاليومق�معالجةCTICVE
10/03/20207.47.3Microsoft IIS تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-0645
11/06/20196.86.5Microsoft IIS Request Filter الحرمان من الخدمة$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-0941
27/03/20178.58.4Microsoft IIS WebDAV ScStoragePathFromUrl Immortal/ExploidingCan تلف الذاكرة$25k-$100k$0-$5kHighOfficial Fix0.04CVE-2017-7269
14/03/20175.24.7Microsoft IIS سكربتات مشتركة$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.07CVE-2017-0055
10/05/20167.87.6Microsoft IIS DLL Loader تجاوز الصلاحيات$25k-$100k$0-$5kNot DefinedOfficial Fix0.03CVE-2016-0152
28/11/20144.34.1Microsoft IIS Error Message mypage سكربتات مشتركة$5k-$25k$0-$5kHighWorkaround0.00
11/11/20146.55.7Microsoft IIS IP/Domain Restriction تجاوز الصلاحيات$25k-$100k$0-$5kUnprovenOfficial Fix0.29CVE-2014-4078
23/04/20146.56.5Microsoft IIS تجاوز الصلاحيات$25k-$100k$5k-$25kNot DefinedNot Defined0.00CVE-2011-5279
13/11/20125.34.8Microsoft IIS FTP Command الكشف عن المعلومات$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-2532
13/11/20125.34.8Microsoft IIS Log File Permission الكشف عن المعلومات$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.05CVE-2012-2531
30/06/20126.55.9Microsoft IIS File Name Tilde تجاوز الصلاحيات$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2005-4360
22/12/20107.57.2Microsoft IIS FTP Server تلف الذاكرة$25k-$100k$0-$5kHighOfficial Fix0.03CVE-2010-3972
15/09/20107.37.0Microsoft IIS Access Restriction توثيق ضعيف$5k-$25k$0-$5kHighOfficial Fix0.00CVE-2010-2731
14/09/20105.95.7Microsoft IIS تلف الذاكرة$25k-$100k$0-$5kHighOfficial Fix0.05CVE-2010-1899
14/09/20107.37.0Microsoft IIS FastCGI تلف الذاكرة$25k-$100k$0-$5kNot DefinedOfficial Fix0.05CVE-2010-2730
08/06/20109.99.9Microsoft IIS تجاوز الصلاحيات$25k-$100k$5k-$25kNot DefinedNot Defined0.02CVE-2010-1256
05/02/20104.34.3Microsoft IIS سكربتات مشتركة$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2003-1582
29/12/20096.36.0Microsoft IIS asp:.jpg تجاوز الصلاحيات$25k-$100k$0-$5kNot DefinedOfficial Fix0.02CVE-2009-4445
24/12/20095.45.1Microsoft IIS ASP تجاوز الصلاحيات$25k-$100k$5k-$25kProof-of-ConceptUnavailable0.03CVE-2009-4444
04/09/20097.57.2Microsoft IIS FTP Server الحرمان من الخدمة$5k-$25k$0-$5kHighOfficial Fix0.03CVE-2009-2521
10/06/20098.17.7Microsoft IIS توثيق ضعيف$25k-$100k$0-$5kHighOfficial Fix0.00CVE-2009-1122
10/06/20098.17.7Microsoft IIS Password Protection توثيق ضعيف$25k-$100k$0-$5kHighOfficial Fix0.02CVE-2009-1535
29/09/20089.89.8Microsoft iis ActiveX Control iisext.dll تجاوز الصلاحيات$25k-$100k$5k-$25kNot DefinedNot Defined0.00CVE-2008-4301
29/09/20085.35.3Microsoft iis ActiveX Control adsiis.dll تجاوز الصلاحيات$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2008-4300
12/02/200810.09.0Microsoft IIS تجاوز الصلاحيات$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2008-0075

167 بعض الادخالات لم يتم عرضها

المزيد من الادخالات بحسب Microsoft

Want to stay up to date on a daily basis?

Enable the mail alert feature now!