What’s Vulnerable › Vulnerabilities
CVE-2000-0199
- Severity: high (CVSS 7.2 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2000-03-14 · updated 2026-06-16
Description
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
Affected products
- Microsoft SQL Server: 7.0
References
Get alerted when CVE-2000-0199 or the next vulnerability affects your stack