CVE-2018-8533 — Vulnetix

Try Vulnetix Request Demo

CVE-2018-8533 PUBLISHED CVSS 4.300000190734863 MEDIUM

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8532.

EPSS 47.85% · 97.7th percentile

Risk Scores

CVSS v2.0

4.300000190734863

EPSS Score

47.85%

97.7th percentile

Affected Products

Vendor	Product	Versions
Microsoft	SQL Server Management Studio 18.0	(Preview 4)
Microsoft	SQL Server Management Studio 17.9	SQL Server Management Studio 17.9
microsoft	sql_server_management_studio	17.9, 18.0

Timeline

Oct 10, 2018 CVE Published
Oct 11, 2018 PoC Published
Oct 11, 2018 PoC Published
Oct 17, 2018 PoC Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Oct 24, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Jun 29, 2022 EPSS Score
Aug 31, 2022 EPSS Score

References

https://portal.msrc.microsoft.com/fr-FR/security-guidance advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8533 url
45583 exploit
1041826 vdb
105476 vdb
https://nvd.nist.gov/vuln/detail/CVE-2018-8533 advisory
https://www.exploit-db.com/exploits/45583 url

Open in Interactive Console →