How severe is CVE-2000-0777?

CVE-2000-0777 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2000-0777 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (71st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2000-0777?

CVE-2000-0777 primarily affects Microsoft Money. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2000-0777?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2000-0777 published?

CVE-2000-0777 was published on 2000-10-20 and last updated on 2026-06-16.

CVE-2000-0777

CVE-2000-0777 is a high-severity vulnerability in Microsoft Money with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 1% (71st percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microsoft Money
Published: 2000-10-20
Last modified: 2026-06-16

Description

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.

Frequently asked questions

What is CVE-2000-0777?: The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.
How severe is CVE-2000-0777?: CVE-2000-0777 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2000-0777 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (71st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2000-0777?: CVE-2000-0777 primarily affects Microsoft Money. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2000-0777?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2000-0777 published?: CVE-2000-0777 was published on 2000-10-20 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:microsoft:money:2000:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:money:2001:*:*:*:*:*:*:*

More vulnerabilities in Microsoft Money

CVE-2008-5823 — Medium (CVSS 4.3): An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on…

All CVEs affecting Microsoft Money →