IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
> AFFECTED_PRODUCTS
Microsoft - Internet Information Server
Version: 4.0
Microsoft - Site Server
Version: 3.0
Microsoft - Site Server Commerce
Version: 3.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
21/12/1999 05:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 13:59
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago