SS
Product
SQL Server
On CISA KEVExploited in the wildRansomware-linked
108
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 31Medium 4Low 0
Watch
Add SQL Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2000-0654 | – | Jul 11 | Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of… Affected: 7.0 |
| CVE-2000-0603 | – | Jul 7 | Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure… Affected: 7.0 |
| CVE-2000-0485 | – | May 30 | Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability Affected: 6.5; 7.0 |
| CVE-2000-0402 | – | May 30 | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the… Affected: 7.0; 7.0; 7.0 |
| CVE-2000-0199 | – | Mar 14 | When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise… Affected: 7.0 |
| CVE-2000-0202 | – | Mar 8 | Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query Affected: 7.0 |
| CVE-1999-0999 | – | Nov 19 | Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet Affected: 7.0 |
| CVE-1999-1556 | – | Jun 29 | Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local… Affected: 6.5 |