CVE-2000-0942

no score yetEPSS 22%

The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.

EPSS: 22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2000-12-19
Modified: 2026-09-23
Record from: the NVD, synced 2026-10-19

Affected

microsoft:indexing_service

References

http://www.securityfocus.com/archive/1/141903
http://www.securityfocus.com/bid/1861
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084
https://exchange.xforce.ibmcloud.com/vulnerabilities/5441
http://www.securityfocus.com/archive/1/141903

Check your stack JSON