CVE-2002-0736: Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attacker...

Security readout for executives and security teams

CVE-2002-0736 is an authentication bypass in Microsoft BackOffice 4.0 and 4.5 web administration pages when those pages are reachable from other systems. A remote attacker could access administrative ASP pages without normal authentication under the described request condition. Exposure is likely limited to legacy environments still running Microsoft BackOffice 4.0 or 4.5 with web administration reachable over a network. Internet-facing or broadly internal administrative pages carry the highest business risk. Prioritize immediately if any BackOffice administrative web interface is still reachable, especially from the internet. If no such legacy systems exist, record non-exposure and close as not applicable. Mitigation focus: Check Microsoft KB Q316838 and vendor guidance for supported remediation details.; Remove network exposure to BackOffice web administration pages where possible.; Restrict administrative pages to trusted management hosts only..

Prepared

Jun 30, 2026, 12:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.