Vulnerabilities

TI-2024-00055 CVE-2024-0056 · GHSA-98g6-xh36-x2p7

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

MEDIUM 42

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0118 Published 2024-01-09 Fixed in 16.0.1110.1, 6.0.26 +17 CWE-319

TI-2023-18583 CVE-2023-36785 · GHSA-j6fm-28rm-xqwj

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 38

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00887 Published 2023-10-10 Fixed in 15.0.2104.1, 16.0.1105.1 +4 CWE-191

TI-2023-18278 CVE-2023-36417 · GHSA-m2xx-hg9w-v7hf

Microsoft SQL OLE DB Remote Code Execution Vulnerability

LOW 38

Microsoft SQL OLE DB Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00825 Published 2023-10-10 Fixed in 15.0.2104.1, 16.0.1105.1 +4 CWE-122

TI-2023-18281 CVE-2023-36420 · GHSA-pj3v-wfg6-gcpq

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 38

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00825 Published 2023-10-10 Fixed in 15.0.2104.1, 16.0.1105.1 +4 CWE-415

TI-2023-18537 CVE-2023-36728 · GHSA-qqpc-cw23-65wv

Microsoft SQL Server Denial of Service Vulnerability

LOW 26

Microsoft SQL Server Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00719 Published 2023-10-10 Fixed in 15.0.4326.1, 16.0.4080.1 +12 CWE-125

TI-2023-18539 CVE-2023-36730 · GHSA-g6rq-2jq4-98mr

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 38

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00869 Published 2023-10-10 Fixed in 15.0.2104.1, 16.0.1105.1 +4 CWE-122

TI-2023-19586 CVE-2023-38169 · GHSA-v2fp-mjm4-pj44

Microsoft SQL OLE DB Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL OLE DB Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0132 Published 2023-08-08 Fixed in 17.10.4.1, 18.2.1.1 +5 CWE-416

TI-2023-13741 CVE-2023-29349 · GHSA-4qc2-x4jp-chwr

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

LOW 37

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00603 Published 2023-06-16 Fixed in 18.6.0006.0, 19.3.0001.0 +8 CWE-191

TI-2023-15334 CVE-2023-32028 · GHSA-9xw5-3469-c697

Microsoft SQL OLE DB Remote Code Execution Vulnerability

LOW 37

Microsoft SQL OLE DB Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00722 Published 2023-06-16 Fixed in 19.3.0001.0, 18.6.0006.0 +5 CWE-122

TI-2023-15333 CVE-2023-32027 · GHSA-hxq8-m932-wj93

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 37

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00603 Published 2023-06-16 Fixed in 17.10.4.1, 18.2.2.1 +6 CWE-122

TI-2023-15332 CVE-2023-32026 · GHSA-h5q5-8389-294x

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 37

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00722 Published 2023-06-16 Fixed in 17.10.4.1, 18.2.1.1 +6 CWE-122

TI-2023-15331 CVE-2023-32025 · GHSA-c3c4-fvw5-6jg3

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 37

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00603 Published 2023-06-16 Fixed in 17.10.4.1, 18.2.1.1 +6 CWE-122

TI-2023-13748 CVE-2023-29356 · GHSA-jw33-cq36-qg29

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 37

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00603 Published 2023-06-16 Fixed in 17.10.4.1, 18.2.1.1 +6 CWE-416

TI-2023-09229 CVE-2023-23384 · GHSA-ppw7-rpjc-2532

Microsoft SQL Server Remote Code Execution Vulnerability

MEDIUM 40

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00871 Published 2023-04-11 Fixed in 10.0.6814.4, 11.0.7512.11 +10 CWE-122

TI-2023-08097 CVE-2023-21713 · GHSA-xj72-54x6-jmcv

Microsoft SQL Server Remote Code Execution Vulnerability

MEDIUM 50

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0177 Published 2023-02-14 Fixed in 11.0.7512.11, 12.0.6174.8 +8 CWE-502

TI-2023-08102 CVE-2023-21718 · GHSA-7qjv-92r9-cq7c

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 37

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00746 Published 2023-02-14 Fixed in 10.50.6785.2, 10.0.6814.4 +10 CWE-191

TI-2023-08090 CVE-2023-21705 · GHSA-4mc5-7v3p-g3p5

Microsoft SQL Server Remote Code Execution Vulnerability

MEDIUM 48

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2023-02-14 Fixed in 11.0.7512.11, 12.0.6174.8 +8 CWE-321

TI-2023-08089 CVE-2023-21704 · GHSA-5f9h-83hw-8qfv

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

LOW 36

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00397 Published 2023-02-14 Fixed in 12.0.6174.8, 12.0.6444.4 +7 CWE-190

TI-2023-07928 CVE-2023-21528 · GHSA-jgrx-xh3r-rhjw

Microsoft SQL Server Remote Code Execution Vulnerability

LOW 36

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00397 Published 2023-02-14 Fixed in 10.50.6785.2, 10.0.6814.4 +10 CWE-122

TI-2022-11688 CVE-2022-29143 · GHSA-f4rw-r75j-wr7m

Microsoft SQL Server Remote Code Execution Vulnerability

LOW 39

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02251 Published 2022-06-15 Fixed in 14.0.2042.3, 12.0.6169.19 +8

TI-2022-07400 CVE-2022-23276 · GHSA-m74m-wrhv-h6gc

SQL Server for Linux Containers Elevation of Privilege Vulnerability

LOW 35

SQL Server for Linux Containers Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00548 Published 2022-02-09 Fixed in 15.0.2090.38

TI-2021-01353 CVE-2021-1636 · GHSA-hmh6-2fr5-6q37

Microsoft SQL Elevation of Privilege Vulnerability

MEDIUM 56

Microsoft SQL Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06693 Published 2021-01-12 Fixed in publication CWE-89

TI-2020-00595 CVE-2020-0618 · GHSA-jcvj-vhj2-vgmw

Deserialization of untrusted data in Microsoft SQL Server

CRITICAL 100KEV

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99046 Published 2020-02-11 No fix listed CWE-502

TI-2019-00798 CVE-2019-1068 · GHSA-62pw-5pr4-ghr5

Improper input validation in Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems

CRITICAL 97KEV

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.57273 Published 2019-07-15 No fix listed CWE-20

TI-2019-00580 CVE-2019-0819 · GHSA-4pv4-8h84-4vg6

An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services…

LOW 37

An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces metadata permissions, aka 'Microsoft SQL Server Analysis Services Information Disclosure Vulnerability'…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05417 Published 2019-05-16 No fix listed

Vulnerabilities

Filters