SEPTEMBER 22, 2026
Live Feed
Back to database
Case File

CVE-2000-0649

LOW · CVSS 2.6 EPSS 76.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2000-07-13 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.6. Its EPSS score suggests a 76.6% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2000-0649
Severity
LOW
CVSS
2.6
EPSS
76.56%

Original NVD Description

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.