CVE-2001-0658

no score yetEPSS 14%

microsoft isa server: no CVSS score yet. EPSS 14% chance of exploitation in the next 30 days.

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-11-01)
Published: 2001-09-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:isa_server

References

http://www.securityfocus.com/bid/3198
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045
https://exchange.xforce.ibmcloud.com/vulnerabilities/6991
http://www.securityfocus.com/bid/3198
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045

Check your stack JSON