CVE-2002-1762

CVE-2002-1762 is a medium-severity vulnerability in Microsoft Baseline Security Analyzer with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 16% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Description

Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.

Frequently asked questions

What is CVE-2002-1762?
Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.
How severe is CVE-2002-1762?
CVE-2002-1762 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2002-1762 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 16% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-1762?
CVE-2002-1762 affects Microsoft Baseline Security Analyzer. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2002-1762?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2002-1762 published?
CVE-2002-1762 was published on 2002-12-31 and last updated on 2026-06-16.

References

Affected products (1)

More vulnerabilities in Microsoft Baseline Security Analyzer

All CVEs affecting Microsoft Baseline Security Analyzer →