CVE-2000-0311: Microsoft Windows 2000

Low severity, CVSS 2.1. EPSS: 1.4% chance of exploitation in the next 30 days.

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.

Affected products

• Microsoft Windows 2000: any version

Published 2000-04-20. Last modified 2026-06-16.