VulnerabilityModified
CVE-2002-0699
Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's…
MEDIUM 5.0EPSS 6.50%
Does this matter?
Lower severity and a low EPSS score (6.50%). Track it; it rarely justifies an emergency change on its own.
Description
Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 6.50% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows 2000 · microsoft/windows 98 · microsoft/windows 98se · microsoft/windows me · microsoft/windows nt · microsoft/windows xp
- Source
- cve@mitre.org
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A190
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A190
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.