Skip to content

September 2000 · Band 3

Likely to be exploited (10% or more)

7 CVEs

Each square is a CVE that EPSS gives a 10% or higher chance of exploitation in the next 30 days.

likely to be exploited
7

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid…CVE-2000-0710Microsoft · 26% likely

    Microsoft

  2. Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the phy…CVE-2000-0759Apache · 26% likely

    Apache

  3. The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name in…CVE-2000-0709Microsoft · 25% likely

    Microsoft

  4. Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands.CVE-2000-0704Omron · 13% likely

    Omron

  5. The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.CVE-2000-0697Sun · 11% likely

    Sun Microsystems

  6. Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.CVE-2000-0690Cgi Script Center · 11% likely

    Cgi Script Center

  7. Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a tru…CVE-2000-0746Microsoft · 10% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.