CVE-1999-0412
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running...
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Exploit likelihood
What each source reports
NVD Score used
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
- Record
CVE-1999-0412- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
- Record
CVE-1999-0412- Updated
- 2026-11-02
EUVDEUVD-1999-0412 No score
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
- Record
EUVD-1999-0412- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g4g4-39cv-vpgv No score
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running...
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
- Record
GHSA-g4g4-39cv-vpgv- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft IIS 2.0/3.0/4.0 - ISAPI GetExtensionVersion() | 1999-03-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-0412 is a high vulnerability (CVSS 7.5) in Microsoft Internet Information Server, published February 19, 1999. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.2%, the 95th percentile. No source names a fixed version.