CVE-2000-1139: Microsoft Exchange Server

High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days.

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.

Affected products

• Microsoft Exchange Server: version 2000 only

Published 2001-01-09. Last modified 2026-06-16.