CVE-2002-0736
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows...
CVE-2002-0736 is a high vulnerability (CVSS 10.0) in Microsoft Backoffice, published August 12, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 34.8%, the 98th percentile. No source names a fixed version.
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
Exploit likelihood
What each source reports
NVD Score used
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
- Record
CVE-2002-0736- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
- Record
CVE-2002-0736- Updated
- 2026-11-02
EUVDEUVD-2002-0728 No score
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
- Record
EUVD-2002-0728- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jh75-frg8-52h3 No score
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows...
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
- Record
GHSA-jh75-frg8-52h3- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |