sql_server vulnerabilities
CVEs whose affected-version data names the sql_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2023-32028High· 7.8Microsoft SQL OLE DB Remote Code Execution Vulnerability
Microsoft SQL OLE DB Remote Code Execution Vulnerability
▾ Twilightmicrosoft · ole_db_driver_for_sql_serverEPSS 0.72%via NVD
CVE-2020-0618High· 8.8CISA KEVPoCA remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
▾ Abyssalmicrosoft · sql_serverEPSS 99%via NVD
CVE-2019-1068High· 8.8CISA KEVPoCA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
▾ Abyssalmicrosoft · sql_serverEPSS 57%via NVD