Microsoft IIS
internet_information_servicescounted 2026-10-07 03:22 UTC
As of 2026-10-07, 56 741 hosts ran Microsoft IIS with at least one known CVE on a service open at their latest check, across 16 versions with CVEs; 86 distinct CVEs.
Known CVEs on hosts running it
56 741hosts with known CVEs
86distinct CVEs
16versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 480 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2014-4078 MEDIUM 5.1 | 31 809 |
| CVE-2010-3972 HIGH 10.0 | 18 764 |
| CVE-2010-2730 HIGH 9.3 | 18 764 |
| CVE-2010-1899 MEDIUM 4.3 | 18 764 |
| CVE-2009-2521 MEDIUM 5.0 | 6 146 |
| CVE-2008-1446 HIGH 9.0 | 5 991 |
| CVE-2009-4445 MEDIUM 6.0 | 5 288 |
| CVE-2009-4444 MEDIUM 6.0 | 5 096 |
| CVE-2005-2089 MEDIUM 4.3 | 5 096 |
| CVE-2009-1535 HIGH 7.5 | 4 784 |
| CVE-2017-7269 CRITICAL 9.8 known exploited | 4 669 |
| CVE-2011-5279 MEDIUM 5.0 | 381 |
| CVE-2003-0224 HIGH 10.0 | 371 |
| CVE-2007-2815 HIGH 10.0 | 371 |
| CVE-1999-0450 HIGH 7.5 | 371 |
| CVE-2000-0258 HIGH 7.5 | 371 |
| CVE-2000-0457 HIGH 7.5 | 371 |
| CVE-2000-0746 HIGH 7.5 | 371 |
| CVE-2000-0884 HIGH 7.5 | 371 |
| CVE-2000-0886 HIGH 7.5 | 371 |
| CVE-2000-0970 HIGH 7.5 | 371 |
| CVE-2000-1104 HIGH 7.5 | 371 |
| CVE-2001-0902 HIGH 7.5 | 371 |
| CVE-2002-0071 HIGH 7.5 | 371 |
| CVE-2002-0074 HIGH 7.5 | 371 |
| CVE-2002-0075 HIGH 7.5 | 371 |
| CVE-2002-0079 HIGH 7.5 | 371 |
| CVE-2002-0147 HIGH 7.5 | 371 |
| CVE-2002-0148 HIGH 7.5 | 371 |
| CVE-2002-0149 HIGH 7.5 | 371 |
| CVE-2002-0150 HIGH 7.5 | 371 |
| CVE-2002-0364 HIGH 7.5 | 371 |
| CVE-2002-0869 HIGH 7.5 | 371 |
| CVE-2002-1180 HIGH 7.5 | 371 |
| CVE-2002-1745 HIGH 7.5 | 371 |
| CVE-2003-1567 HIGH 7.5 | 371 |
| CVE-2001-0506 HIGH 7.2 | 371 |
| CVE-2001-0507 HIGH 7.2 | 371 |
| CVE-2008-0074 HIGH 7.2 | 371 |
| CVE-2002-1181 MEDIUM 6.8 | 371 |
| CVE-2003-0223 MEDIUM 6.8 | 371 |
| CVE-2006-0026 MEDIUM 6.5 | 371 |
| CVE-2000-0770 MEDIUM 6.4 | 371 |
| CVE-2000-0071 MEDIUM 5.0 | 371 |
| CVE-2000-0246 MEDIUM 5.0 | 371 |
| CVE-2000-0304 MEDIUM 5.0 | 371 |
| CVE-2000-0408 MEDIUM 5.0 | 371 |
| CVE-2000-0413 MEDIUM 5.0 | 371 |
| CVE-2000-0630 MEDIUM 5.0 | 371 |
| CVE-2000-0631 MEDIUM 5.0 | 371 |
| CVE-2000-0778 MEDIUM 5.0 | 371 |
| CVE-2000-0951 MEDIUM 5.0 | 371 |
| CVE-2001-0004 MEDIUM 5.0 | 371 |
| CVE-2001-0096 MEDIUM 5.0 | 371 |
| CVE-2001-0146 MEDIUM 5.0 | 371 |
| CVE-2001-0151 MEDIUM 5.0 | 371 |
| CVE-2001-0508 MEDIUM 5.0 | 371 |
| CVE-2001-1186 MEDIUM 5.0 | 371 |
| CVE-2001-1243 MEDIUM 5.0 | 371 |
| CVE-2002-0072 MEDIUM 5.0 | 371 |
| CVE-2002-0073 MEDIUM 5.0 | 371 |
| CVE-2002-0224 MEDIUM 5.0 | 371 |
| CVE-2002-0419 MEDIUM 5.0 | 371 |
| CVE-2002-1182 MEDIUM 5.0 | 371 |
| CVE-2002-1694 MEDIUM 5.0 | 371 |
| CVE-2002-1695 MEDIUM 5.0 | 371 |
| CVE-2002-1744 MEDIUM 5.0 | 371 |
| CVE-2002-1790 MEDIUM 5.0 | 371 |
| CVE-2002-1908 MEDIUM 5.0 | 371 |
| CVE-2003-0225 MEDIUM 5.0 | 371 |
| CVE-2003-0226 MEDIUM 5.0 | 371 |
| CVE-2003-0718 MEDIUM 5.0 | 371 |
| CVE-2003-1566 MEDIUM 5.0 | 371 |
| CVE-2005-2678 MEDIUM 5.0 | 371 |
| CVE-2002-1700 MEDIUM 4.3 | 371 |
| CVE-2000-0649 LOW 2.6 | 371 |
| CVE-2002-0422 LOW 2.6 | 371 |
| CVE-2001-0544 LOW 2.1 | 371 |
| CVE-2009-1122 HIGH 7.5 | 364 |
| CVE-2006-6578 HIGH 7.5 | 154 |
| CVE-2002-1717 MEDIUM 5.0 | 154 |
| CVE-2002-1718 MEDIUM 5.0 | 154 |
| CVE-2005-4360 HIGH 7.8 | 115 |
| CVE-1999-0233 HIGH 10.0 | 4 |
| CVE-1999-0253 HIGH 7.5 | 4 |
| CVE-2006-6579 MEDIUM 4.4 | 4 |
Hosts: matches on services open at each host's latest check, over every version.