Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on Linux | 17.0.0.0 – < 17.10.6.1 | |
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on MacOS | 17.0.0.0 – < 17.10.6.1 | |
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on Windows | 17.0.0.0 – < 17.10.6.1 | |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on Linux | 18.0.0.0 – < 18.3.3.1 | |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on MacOS | 18.0.0.0 – < 18.3.3.1 | |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on Windows | 18.0.0.0 – < 18.3.3.1 | |
| Microsoft | Microsoft SQL Server 2019 (CU 25) | 15.0.0 – < 15.0.4360.2 | |
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0 – < 15.0.2110.4 | |
| Microsoft | Microsoft SQL Server 2022 for (CU 12) | 16.0.0 – < 16.0.4120.1 | |
| Microsoft | Microsoft SQL Server 2022 (GDR) | 16.0.0 – < 16.0.1115.1 | |
| microsoft | odbc driver 17 for sql server | 17.0.0.0 – < 17.10.6.1 | |
| microsoft | odbc driver 18 for sql server | 18.0.0.0 – < 18.3.3.1 | |
| microsoft | sql server | 16.0.0 – < 16.0.4120.1 |
Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.