CVE-2001-1404: Mozilla Bugzilla

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.

Affected products

• Mozilla Bugzilla: version 2.4 only; version 2.6 only; version 2.8 only; version 2.10 only; version 2.12 only; version 2.14 only

Published 2001-09-10. Last modified 2026-06-16.