Microsoft Msde vulnerabilities

4 CVEs affecting Microsoft Msde, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2000-1209, published 2002-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2000-1209, published 2002-08-12. High severity, CVSS 10.0. EPSS: 87.3% chance of exploitation in the next 30 days. The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products…
CVE-2002-0642, published 2002-07-23. High severity, CVSS 7.2. EPSS: 49.7% chance of exploitation in the next 30 days. The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows…
CVE-2002-0624, published 2002-07-23. High severity, CVSS 7.5. EPSS: 22.8% chance of exploitation in the next 30 days. Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database…
CVE-2002-0641, published 2002-07-23. High severity, CVSS 7.5. EPSS: 11.2% chance of exploitation in the next 30 days. Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute…