CVE-2000-0199: microsoft sql_server
Vulnerability summary
CVE-2000-0199 is a high (CVSS 7.2) vulnerability in microsoft sql_server. EPSS estimates a 1.44% chance of exploitation in the next 30 days, higher than 72.8% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 22-03-2000PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.44%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.44% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- sql_server7.0
1 vendor · 1 product