← Back

Backoffice

backoffice

Vendor: Microsoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Backoffice
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type...Show more
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.Show less
1Microsoft
3Backoffice
Windows 2000Windows Nt
Apr 16, 2026
Feb 12, 1999
N/A· v4
N/A· v3
2.1 LOW· v2
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.