CVE-2000-0199

HIGH 7.2CVE-2000-0199 · Published 14/03/2000 · updated 16/06/2026

In short

CVE-2000-0199 is a HIGH (CVSS 7.2) vulnerability affecting sql server (microsoft).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sql server microsoft	`= 7.0`	No fix yet

Description

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.

References

securityfocus.com/bid/1055 · Exploit

More vulnerabilities in sql server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free