VULNERABILITY INTELLIGENCE
CVE-2002-1181
CVSS score6.8 MEDIUM
EPSS probability39.41%
CISA KEVNot currently listed
Published2002-11-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors.