A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.4
EPSS Ranking 97.1%