Microsoft Backoffice vulnerabilities

2 CVEs affecting Microsoft Backoffice, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-0736, published 2002-08-12.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-0736, published 2002-08-12. High severity, CVSS 10.0. EPSS: 31.6% chance of exploitation in the next 30 days. Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with…
• CVE-1999-0372, published 1999-02-12. Low severity, CVSS 2.1. EPSS: 4.2% chance of exploitation in the next 30 days. The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.