CVE-2001-0658
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.2%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 14.21% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/isa server
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/3198
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6991
- http://www.securityfocus.com/bid/3198
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6991
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.