本ページは microsoft commercial_internet_system に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2000-0246 | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. | [email protected] | 5.0 | 78.91% | 2000-03-30 | 2026-06-16 |
| CVE-2000-0053 | Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request. | [email protected] | 7.5 | 14.70% | 2000-01-04 | 2026-06-16 |
| CVE-1999-0777 | IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. | [email protected] | 7.5 | 11.99% | 1999-09-23 | 2026-06-16 |
| CVE-1999-0910 | Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user. | [email protected] | 5.0 | 5.78% | 1999-09-10 | 2026-06-16 |
| CVE-1999-0867 | Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers. | [email protected] | 5.0 | 21.52% | 1999-08-11 | 2026-06-16 |
| CVE-1999-0861 | Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext. | [email protected] | 2.6 | 3.24% | 1999-08-11 | 2026-06-16 |