7.5high
CVE-2001-0658in critical feed
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
14.2%
percentile 97%
Public exploits
0
none known
Summary
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
Exploit prediction (EPSS)
14.21% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- docs.microsoft.com /en-us/security-updates/securitybulletins/2001/ms01-045 · vendor-advisory, x_refsource_MS, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/6991 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/3198 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2001-0658
- NVD: CVE-2001-0658
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.