Vulnerabilities > Microsoft > ISA Server > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-09-21 | CVE-2007-4991 | Information Exposure vulnerability in Microsoft ISA Server 2004 The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet. | 5.0 |
| 2003-08-18 | CVE-2003-0526 | Unspecified vulnerability in Microsoft ISA Server 2000 Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found." network microsoft | 6.8 |
| 2003-05-05 | CVE-2003-0110 | Unspecified vulnerability in Microsoft ISA Server and Proxy Server The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745. | 5.0 |
| 2003-03-24 | CVE-2003-0011 | Denial of Service vulnerability in Microsoft ISA Server 2000 Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled. | 5.0 |
| 2001-09-20 | CVE-2001-0546 | Denial of Service vulnerability in Microsoft ISA Server 2000 Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data. | 5.0 |