SQL Server vulnerabilities
2 published alerts for Microsoft SQL Server.
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-1068). Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account. CISA remediation due date: 2026-08-29. If you need help checking exposure, call (864) 335-9223.
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
Microsoft SQL Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2020-0618). Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account. CISA remediation due date: 2024-10-09. If you need help checking exposure, call (864) 335-9223.