CVE-2000-0884EPSS p99.2%

CVE-2000-0884CVE-2000-0884

microsoft / internet_information_server

Description

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

Scoring

CVSS 7.5 ()
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS63.28% probability of exploitation · percentile 99.2% · 2026-10-05T12:00:23Z
Last modified2026-09-23
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.