CVE-2002-1762: Microsoft Baseline Security Analyzer

Medium severity, CVSS 5.0. EPSS: 15.9% chance of exploitation in the next 30 days.

Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.

Affected products

• Microsoft Baseline Security Analyzer: version 1.0 only

Published 2002-12-31. Last modified 2026-06-16.