Back

CVE-2001-0658

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.

Published: Sep 20, 2001 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
microsoft isa_server 2000

GitHub Security Advisory GHSA-vmrx-337p-88gv

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA)...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 14.22%

Top 4% most likely to be exploited

Threat Score 34.3 / 100

Data Sources

NVD EPSS GitHub