CVE-1999-0737

CVSS 2.0 Score 5 of 10 (medium)

Details

Published May 7, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0737 is a vulnerability affecting the viewcode.asp file in Internet Information Services (IIS) and Site Server. An attacker can exploit this issue to read arbitrary files remotely. This weakness, if left unaddressed, poses a significant risk to confidentiality and potentially integrity and availability of the targeted system's data. The vulnerability arises due to insufficient access controls in the viewcode.asp file handler. Organizations using IIS or Site Server are advised to apply the available patches or workarounds to eliminate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share