Unrated severityNVD Advisory· Published Sep 10, 1999· Updated Apr 16, 2026
CVE-1999-0910
CVE-1999-0910
Description
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
Affected products
4cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:site_server_commerce:3.0:alpha:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.