Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00845
Percentile: 0.73828

CVSS Scoring

Mapped CWE(s)

• CWE-400 : Uncontrolled Resource Consumption

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1499 : Endpoint Denial of Service
  Kill Chain: impact

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*
• cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*
• cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*

← Back to Home