CVE-2004-1133: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attac...

Security readout for executives and security teams

CVE-2004-1133 is a cross-site scripting issue in Microsoft W3Who ISAPI (w3who.dll). If exposed, an attacker could cause the service to return attacker-controlled HTML or script in a user's browser. The bundle does not provide CVSS, affected version details, or a named patch. Likely exposure is limited to environments still running and exposing Microsoft W3Who ISAPI w3who.dll. The CVE record does not provide CPEs, specific affected versions, or deployment prevalence. Treat as a targeted legacy exposure issue. It is not known exploited from the provided sources, but internet-facing legacy ISAPI components should be found and retired or isolated quickly. Mitigation focus: Identify any internet-facing or internal endpoints exposing w3who.dll.; Check Microsoft or product-owner guidance for fixes, retirement, or supported replacements.; Restrict access to affected endpoints until vendor-approved remediation is complete..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.