Every CVE Search/ Get API key

CVE-2000-0777

The password protection feature of Microsoft Money can store the password in plaintext, which...

7.2 High

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.

Exploit likelihood

1.48%Down 2.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.

Record
CVE-2000-0777
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.

Record
CVE-2000-0777
Updated
2026-11-02
EUVDEUVD-2000-0771 No score

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.

Record
EUVD-2000-0771
Updated
2026-11-03
GitHub AdvisoriesGHSA-3f5f-x3vv-f92r No score

The password protection feature of Microsoft Money can store the password in plaintext, which...

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.

Record
GHSA-3f5f-x3vv-f92r
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0777 is a high vulnerability (CVSS 7.2) in Microsoft Money, published October 13, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 74th percentile. No source names a fixed version.

References

MoveEnter Open