Jet
Vendor:
First CVE: Jul 28, 1999 · Active for 26 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.2
Avg CVEs / Year
Higher CVE frequency than 55% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 69% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Jet over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 28, 1999
26 years ago
Most Recent CVE
Mar 6, 2008
6,714 days ago
CVE Severity & Scoring
Jet7 CVEs
100%
All CVEs352,294 CVEs
45%
40%
11%
High
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown7 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown7 (100.0%)
User Interaction
None0 (0.0%)
Unknown7 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown7 (100.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-6026HIGH Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to e | Nov 20, 2007 | 9.3 | 50 | NO | YES |
CVE-2005-0944HIGH Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted | May 2, 2005 | 7.5 | 48 | NO | YES |
CVE-2002-0859HIGH Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code. | Sep 5, 2002 | 7.5 | 41 | NO | YES |
CVE-2004-0197HIGH Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query. | Jun 1, 2004 | 7.5 | 30 | NO | NO |
CVE-2008-1200HIGH Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll). | Mar 6, 2008 | 9.3 | 28 | NO | NO |
CVE-2000-0325HIGH The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability. | Aug 20, 1999 | 7.2 | 28 | NO | YES |
CVE-2000-0323HIGH The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability. | Jul 28, 1999 | 7.6 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
57.1% of CVEs· 93rd percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Jet
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.0.8618.0 | 1 | 9.3 | 28.3% | 0 | 1 |
| 4.0 | 4 | 7.7 | 22.3% | 0 | 1 |
| 3.5.1 | 1 | 7.2 | 3.7% | 0 | 1 |
| 3.51 | 1 | 7.6 | 5.5% | 0 | 0 |
| 3.5 | 2 | 7.4 | 4.6% | 0 | 1 |