Windows Server 2004
Vendor:
First CVE: Jun 9, 2020 · Active for 6 years
28
Total CVEs
More Total CVEs than 96% of tracked products
9.3
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 68% of tracked products
96.4%
KEV Rate
Higher KEV Rate than 99% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Windows Server 2004 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 9, 2020
6 years ago
Most Recent CVE
Jun 9, 2026
45 days ago
CVE Severity & Scoring
Windows Server 200428 CVEs
89%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local22 (78.6%)
Network6 (21.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low27 (96.4%)
High1 (3.6%)
Unknown0 (0.0%)
User Interaction
None26 (92.9%)
Unknown0 (0.0%)
Required2 (7.1%)
Privileges Required
Low21 (75.0%)
High0 (0.0%)
None7 (25.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-1472CRITICAL An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protoc | Aug 17, 2020 | 10.0 | 99 | YES | YES |
CVE-2021-31166CRITICAL HTTP Protocol Stack Remote Code Execution Vulnerability | May 11, 2021 | 9.8 | 98 | YES | YES |
CVE-2021-40444HIGH <p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to expl | Sep 15, 2021 | 8.8 | 97 | YES | YES |
CVE-2021-1675HIGH Windows Print Spooler Remote Code Execution Vulnerability | Jun 8, 2021 | 7.8 | 96 | YES | YES |
CVE-2021-1732HIGH Windows Win32k Elevation of Privilege Vulnerability | Feb 25, 2021 | 7.8 | 95 | YES | YES |
CVE-2021-40449HIGH Win32k Elevation of Privilege Vulnerability | Oct 13, 2021 | 7.8 | 94 | YES | YES |
CVE-2021-36942HIGH Windows LSA Spoofing Vulnerability | Aug 12, 2021 | 7.5 | 93 | YES | YES |
CVE-2021-42278HIGH Active Directory Domain Services Elevation of Privilege Vulnerability | Nov 10, 2021 | 7.5 | 90 | YES | NO |
CVE-2021-31955MEDIUM Windows Kernel Information Disclosure Vulnerability | Jun 8, 2021 | 5.5 | 90 | YES | NO |
CVE-2021-1647HIGH Microsoft Defender Remote Code Execution Vulnerability | Jan 12, 2021 | 7.8 | 81 | YES | NO |
Exploit Exposure
Signals from CVEs in this product scope (28 CVEs).
CISA KEV
27 CVEs
96.4% of CVEs· 99th percentile
Metasploit
7 CVEs
25.0% of CVEs· 98th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
3.6% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (28 CVEs).
Media Mentions
Signals from CVEs in this product scope (28 CVEs).
Top CNAs Publishing CVEs For Windows Server 2004
Top CWEs
Versions
No cataloged versions.