By publication date
Exploited and new serious CVEs: February 2000
9 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2000-0105Proof of concept | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variablemicrosoft · outlook express | Medium5.0 | — | 20.6% | Feb 1, 2000 |
24Monitor | CVE-2000-1205No exploit | Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via apache · http server · CWE-79 | Medium4.3 | — | 23.5% | Feb 1, 2000 |
34Monitor | CVE-2000-0114Proof of concept | Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in tmicrosoft · internet information server | Medium5.0 | — | 47.5% | Feb 2, 2000 |
26Monitor | CVE-2000-0122No exploit | Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.emicrosoft · frontpage | Medium5.0 | — | 21.4% | Feb 3, 2000 |
45Plan | CVE-2000-0222No exploit | The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers microsoft · windows 2000 | Critical10.0 | — | 15.0% | Feb 15, 2000 |
24Monitor | CVE-2000-0156Proof of concept | Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Imagmicrosoft · internet explorer | Medium5.1 | — | 12.8% | Feb 16, 2000 |
33Monitor | CVE-2000-0161No exploit | Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to exmicrosoft · site server | High7.5 | — | 10.0% | Feb 18, 2000 |
26Monitor | CVE-2000-0211Proof of concept | The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an imicrosoft · windows media services | Medium5.0 | — | 21.3% | Feb 23, 2000 |
43Plan | CVE-2000-0191Proof of concept | Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a ..axis · storpoint cd | Critical10.0 | — | 10.8% | Feb 29, 2000 |
- CVE-2000-010526Monitor
Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable
MediumCVSS 5.0Proof of conceptEPSS 20%microsoft · outlook expressFeb 1, 2000
- CVE-2000-120524Monitor
Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via
MediumCVSS 4.3No exploitEPSS 23%apache · http serverFeb 1, 2000
- CVE-2000-011434Monitor
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in t
MediumCVSS 5.0Proof of conceptEPSS 47%microsoft · internet information serverFeb 2, 2000
- CVE-2000-012226Monitor
Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.e
MediumCVSS 5.0No exploitEPSS 21%microsoft · frontpageFeb 3, 2000
- CVE-2000-022245Plan
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers
CriticalCVSS 10.0No exploitEPSS 15%microsoft · windows 2000Feb 15, 2000
- CVE-2000-015624Monitor
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Imag
MediumCVSS 5.1Proof of conceptEPSS 12%microsoft · internet explorerFeb 16, 2000
- CVE-2000-016133Monitor
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to ex
HighCVSS 7.5No exploitEPSS 10%microsoft · site serverFeb 18, 2000
- CVE-2000-021126Monitor
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an i
MediumCVSS 5.0Proof of conceptEPSS 21%microsoft · windows media servicesFeb 23, 2000
- CVE-2000-019143Plan
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a ..
CriticalCVSS 10.0Proof of conceptEPSS 10%axis · storpoint cdFeb 29, 2000