CVE-2002-0697 in the critical feed json
Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP clie…
published 2002-08-12 24 y ago modified 2026-06-16 4 mo ago also EUVD-2002-0689
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 18.0%
- EPSS 18.0% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
Exploit prediction
17.99% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2002/ms02-036
vendor-advisory
-
iss.net
/security_center/static/9657.php
vdb-entry
-
securityfocus.com
/bid/5308
vdb-entry
Sources
- CVE List CVE-2002-0697
- NVD CVE-2002-0697
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.