CVE-1999-0561

High

Published: 01/01/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.57%

94th percentile - higher than 94% of all known CVEs

The #exec function is enabled for Server Side Include (SSI) files in IIS, which may lead to unauthorized command execution on the server.

Exploitation of this vulnerability could lead to serious security breaches, including remote code execution.

It is recommended to disable the #exec function in IIS configuration for SSI files to minimize risk.

Original NVD description (English source)

IIS has the #exec function enabled for Server Side Include (SSI) files.