CVE-2000-0097
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary...
CVE-2000-0097 is a medium vulnerability (CVSS 5.0) in Microsoft Index Server, published January 26, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 35.9%, the 98th percentile. No source names a fixed version.
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
Exploit likelihood
What each source reports
NVD Score used
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
- Record
CVE-2000-0097- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
- Record
CVE-2000-0097- Updated
- 2026-11-02
EUVDEUVD-2000-0096 No score
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
- Record
EUVD-2000-0096- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-726j-722q-69g3 No score
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary...
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
- Record
GHSA-726j-722q-69g3- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - Directory Traversal | 2000-01-26 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |