{"id":"CVE-2023-21568","title":"Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability","summary":"Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-502"],"vendor":"Microsoft","product":"SQL Server Integration Services for Visual Studio 2019","affected":["sql_server_integration_services_for_visual_studio_2019 >= 16.0.0 < 16.0.5035.3","sql_server_integration_services_for_visual_studio_2022 >= 16.0.0 < 16.0.5035.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-06-03T18:49:42.706032Z"},"published":"2023-02-14","updated":"2026-11-02","sourceUpdated":"2026-11-02T22:18:32.042Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-21568","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21568","label":"Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability"}],"tags":["cve.org"],"epss":0.00934,"epssPercentile":0.60974,"ingestedAt":"2026-11-05T19:30:42.874Z","slug":"CVE-2023-21568","body":"## Overview\n\nMicrosoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability\n\n## Affected\n\n- `sql_server_integration_services_for_visual_studio_2019 >= 16.0.0 < 16.0.5035.3`\n- `sql_server_integration_services_for_visual_studio_2022 >= 16.0.0 < 16.0.5035.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}