Known vulnerabilities in Microsoft Internet Information Services (IIS) - page 2

Vendor: Microsoft
Software: Microsoft Internet Information Services (IIS)
Software CPE: cpe:2.3:a:microsoft:microsoft_iis:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 30
Public exploits: 7
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Internet Information Services (IIS) Microsoft Internet Information Services (IIS) is affected by 30 known vulnerabilities: 3 critical, 9 high, 17 medium, 1 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71091 - Integer overflow
CVE-2015-1635		 CWE-190 Critical
Available
Exploited
 - 11.01.2023 SB2015041406
#VU13778 - Improper input validation
CVE-2018-8206		 CWE-20 Medium
No
No
 - 10.07.2018 SB2018071016
#VU13295 - Improper input validation
CVE-2018-8226		 CWE-20 Medium
No
No
 - 12.06.2018 SB2018061219
#VU13297 - Memory corruption
CVE-2018-8231		 CWE-119 High
No
No
 - 12.06.2018 SB2018061219
#VU11728 - Improper input validation
CVE-2018-0956		 CWE-20 Medium
No
No
 - 10.04.2018 SB2018041029
#VU7457 - Missing release of memory after effective lifetime
CVE-2017-8582		 CWE-401 Medium
No
No
 - 11.07.2017 SB2017071122
#VU6183 - Memory corruption
CVE-2017-7269		 CWE-119 Critical
Available
Exploited
 - 28.03.2017 SB2017032801
#VU5984 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0055		 CWE-79 Medium
No
No
 - 14.03.2017 SB2017031413
#VU2795 - Stack-based buffer overflow
CVE-2009-3023		 CWE-121 High
Available
No
 - 23.12.2016 SB2009083101
#VU2794 - Improper input validation
CVE-2009-2521		 CWE-20 High
Available
No
 - 23.12.2016 SB2009083101


Showing elements 21 - 40 out of 30