Every CVE Search/ Get API key

CVE-2002-1260

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier...

7.5 High

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

Exploit likelihood

15.5%Up 2.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

Record
CVE-2002-1260
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

Record
CVE-2002-1260
Updated
2026-11-02
EUVDEUVD-2002-1244 No score

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

Record
EUVD-2002-1244
Updated
2026-11-03
GitHub AdvisoriesGHSA-8wqg-hpmc-35r4 No score

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier...

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

Record
GHSA-8wqg-hpmc-35r4
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1260 is a high vulnerability (CVSS 7.5) in Microsoft Windows 2000, published December 23, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.5%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open