CVE-2000-0559 : Détail

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.76%	–	–
2022-03-27	–	–	1.76%	–	–
2022-04-03	–	–	1.76%	–	–
2022-04-17	–	–	1.76%	–	–
2022-08-28	–	–	1.76%	–	–
2023-03-05	–	–	1.76%	–	–
2023-03-12	–	–	–	0.06%	–
2023-09-17	–	–	–	0.06%	–
2023-12-03	–	–	–	0.06%	–
2023-12-17	–	–	–	0.06%	–
2024-01-07	–	–	–	0.06%	–
2024-03-31	–	–	–	0.06%	–
2024-06-02	–	–	–	0.06%	–
2024-06-23	–	–	–	0.06%	–
2024-08-04	–	–	–	0.06%	–
2024-08-11	–	–	–	0.06%	–
2024-10-27	–	–	–	0.06%	–
2025-01-26	–	–	–	0.06%	–
2025-01-19	–	–	–	0.06%	–
2025-01-25	–	–	–	0.06%	–
2025-03-18	–	–	–	–	0.14%
2025-03-30	–	–	–	–	0.12%
2025-04-15	–	–	–	–	0.12%
2025-04-15	–	–	–	–	0.12,%

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Date	Percentile
2022-02-06	54%
2022-03-27	55%
2022-04-03	74%
2022-04-17	75%
2022-08-28	76%
2023-03-05	77%
2023-03-12	23%
2023-09-17	24%
2023-12-03	23%
2023-12-17	24%
2024-01-07	23%
2024-03-31	24%
2024-06-02	25%
2024-06-23	26%
2024-08-04	25%
2024-08-11	26%
2024-10-27	27%
2025-01-26	28%
2025-01-19	27%
2025-01-25	28%
2025-03-18	31%
2025-03-30	28%
2025-04-15	32%
2025-04-15	32%

source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System (formerly known as SessionWall-3) password which authorizes users to view and configure the application's registry settings. Provided that either a remote or local user has access to the registry, it is possible to decrypt the password into plaintext with the use of an exploit tool (sw3passw.exe) or through simple XORing techniques. This password along with the key is stored in the following registry location: HKEY_LOCAL_MACHINE\Software\ComputerAssociates\SessionWall\1.0\Security\AdminPassword The first byte will be the length of the key (n), the next (n) bytes are the key, the remaining bytes are the encrypted password with the exception of the last byte which is a terminating null. 20012-1.exe - Administrator password decryptor for Win 9x/NT. 20012-2.zip - Source code (use TASM). https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20012-1.exe https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20012-2.zip