VDB

BDU%3A2020-00821

BDU%3A2020-00821 PUBLISHED CVSS 8.5 HIGH

Уязвимость системы управления реляционными базами данных Microsoft SQL Server, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0
8.5

Affected Products

VendorProductVersions
MicrosoftMicrosoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)unspecified
MicrosoftMicrosoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)*
MicrosoftMicrosoft SQL Server2016 for x64-based Systems Service Pack 2 (CU), 2012 for 32-bit Systems Service Pack 4 (QFE), 2012 for x64-based Systems Service Pack 4 (QFE)
MicrosoftMicrosoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)unspecified
Microsoft CorpSQL Server
MicrosoftMicrosoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)*
MicrosoftMicrosoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)unspecified

Timeline

  • Mar 4, 2020 CVE Published
  • Mar 12, 2020 PoC Published
  • Jan 15, 2021 PoC Published
  • Sep 23, 2021 PoC Published
  • Sep 20, 2024 PoC Published
  • Oct 2, 2024 CVE Updated
  • Feb 6, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Feb 2, 2026 PoC Published
  • Mar 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›