Microsoft Microsoft SQL Server 2022 (CU 20) Schwachstellen (CVE)

Für Microsoft Microsoft SQL Server 2022 (CU 20) veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

7 Ergebnisse
8.8Hoch
CVE-2025-55227

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.4%EPSS
6.5Mittel
CVE-2025-47997

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.

8.8Hoch
CVE-2025-47954

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2022 (CU 20); Microsoft Microsoft SQL Server 2022 (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.7%EPSS
8.8Hoch
CVE-2025-49759

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.3%EPSS
8.8Hoch
CVE-2025-24999

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

1.9%EPSS
8.8Hoch
CVE-2025-53727

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.4%EPSS
8.8Hoch
CVE-2025-49758

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.1%EPSS