Microsoft SQL Server vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
107 matching records
- High7.8CVE-2023-32025 is listed by Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 0.60%Jun 16, 2023
- High7.8CVE-2023-29356 is listed by Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 0.60%Jun 16, 2023
- High7.8Microsoft ODBC and OLE DB Remote Code Execution VulnerabilityCheck if you run itEPSS 0.60%Jun 16, 2023
- High7.3CVE-2023-23384 is listed by Microsoft SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 0.87%Apr 11, 2023
- High7.8CVE-2023-21718 is listed by Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 0.75%Feb 14, 2023
- High8.8CVE-2023-21713 is listed by Microsoft SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 1.77%Feb 14, 2023
- High8.8CVE-2023-21705 is listed by Microsoft SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 1.12%Feb 14, 2023
- High7.8CVE-2023-21704 is listed by Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 0.40%Feb 14, 2023
- High7.8CVE-2023-21528 is listed by Microsoft SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 0.40%Feb 14, 2023
- High7.5CVE-2022-29143 is listed by Microsoft SQL Server Remote Code Execution Vulnerability.Check if you run itEPSS 2.00%Jun 15, 2022
- High7.8SQL Server for Linux Containers Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.55%Feb 9, 2022
- High8.8Microsoft SQL Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.69%Jan 12, 2021
- High8.8Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.05%Feb 11, 2020
- High8.8Microsoft SQL Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 57.27%Jul 15, 2019
- Medium6.5An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces metadata permissions, aka 'Microsoft SQL Server An…Check if you run itEPSS 5.42%May 16, 2019
- High7.5Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerab…Check if you run itEPSS 8.26%Aug 8, 2017
- High8.8Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via u…Check this weekEPSS 11.89%Nov 10, 2016
- High8.8The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users…Check this weekEPSS 11.86%Nov 10, 2016
- Medium6.5Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Service…Check this weekEPSS 17.57%Nov 10, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified…Check if you run itEPSS 8.19%Nov 10, 2016
- High8.8Microsoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privilege…Check this weekEPSS 11.99%Nov 10, 2016
- High8.8Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, a…Check this weekEPSS 11.89%Nov 10, 2016
- High8.5Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certain attempts to execute virt…Check this weekEPSS 11.84%Jul 14, 2015
- High7.1Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitial…Check this weekEPSS 10.29%Jul 14, 2015
- Medium6.5Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pointers, which allows remot…Check this weekEPSS 18.86%Jul 14, 2015