CVE-2017-0055
Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request, aka "Microsoft IIS Server XSS Elevation of Privilege Vulnerability."
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_rt_8.1 | - | - |
| microsoft / windows_server_2012 | r2 | r2.x |
| microsoft / windows_server_2008 | r2 | r2.x |
| microsoft / windows_server_2016 | - | - |
| microsoft / windows_7 | - | - |
| microsoft / windows_10 | 1511 | 1511.x |
| microsoft / windows_10 | 1607 | 1607.x |
| microsoft / windows_8.1 | - | - |
| microsoft / windows_vista | - | - |
| microsoft / windows_server_2008 | - | - |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime