Login Request a demo
SS
Product
SQL Server
by Microsoft · last CVE Jan 9, 2024
On CISA KEVExploited in the wildRansomware-linked
108
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities108In the news3Timeline
Severity mix
Critical 1High 31Medium 4Low 0
Severity
All severities108Critical1High31Medium4Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add SQL Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-0819
6.5
5%
May 16
An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces metadata permissions, aka 'Microsoft SQL Server Analysis…
Affected: 2017
CVE-2016-7252
6.5
18%
Nov 10
Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Services…
Affected: 2016
CVE-2016-7251
6.1
8%
Nov 10
Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter,…
Affected: 2016
CVE-2023-36728
5.5
1%
Oct 10
Microsoft SQL Server Denial of Service Vulnerability
Affected: 2014; 2016; 2017; 2019; 2022
Showing 4