CVE Catalog
CVE-2000-0097
MediumExploitation Probability (EPSS)
Very high risk35.88%
98th percentile - higher than 98% of all known CVEs
Summary
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, known as the 'Malformed Hit-Highlighting Argument' vulnerability.
Risk Assessment
Attackers may gain access to sensitive data stored on the server, potentially leading to serious security breaches.
Recommendation
It is recommended to update Microsoft Index Server to the latest version and implement appropriate security rules to minimize risk.
Original NVD description (English source)
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.