Back
CVE-2001-0658
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
Published: Sep 20, 2001
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| microsoft | isa_server | 2000 |
GitHub Security Advisory GHSA-vmrx-337p-88gv
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA)...
References (6)
- http://www.securityfocus.com/bid/3198
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6991
- http://www.securityfocus.com/bid/3198
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6991
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
14.22%
Top 4% most likely to be exploited
Threat Score
34.3 / 100
Data Sources
NVD
EPSS
GitHub