CVE-2002-0645: Microsoft Data Engine

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.

Affected products

• Microsoft Data Engine: version 2000 only
• Microsoft SQL Server: version 2000 only

Published 2002-08-12. Last modified 2026-06-16.