CVE-2023-23375 — Vulnetix

CVE-2023-23375 PUBLISHED CVSS 7.800000190734863 HIGH

Microsoft SQL Server Remote Code Execution Vulnerability

EPSS 1.06% · 78.0th percentile

Risk Scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

EPSS Score

1.06%

78.0th percentile

Vendor	Product	Versions
Microsoft	Microsoft SQL Server 2019 (CU 18)	15.0.0
Microsoft	Microsoft SQL Server 2019 (GDR)	15.0.0
microsoft	odbc_driver_18_for_sql_server	18.0.0.0
Microsoft	Microsoft SQL Server 2012 Service Pack 4 (QFE)	11.0.0
Microsoft	Microsoft SQL Server 2022 (GDR)	16.0.0
microsoft	ole_db_driver_19_for_sql_server	19.0.0
microsoft	ole_db	19.1.0, 19.1.0, 18.0
Microsoft	Microsoft SQL Server 2014 Service Pack 3 (CU 4)	12.0.0
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	19.0.0
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	18.0.0
Microsoft	Microsoft SQL Server 2016 Service Pack 3 (GDR)	13.0.0
microsoft	sql_server	11.0.0, 10.0.0, 14.0.0
Microsoft	Microsoft SQL Server 2008 Service Pack 4 (QFE)	10.0.0
Microsoft	Microsoft SQL Server 2017 (CU 31)	14.0.0
Microsoft	Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack	13.0.0
microsoft	odbc_driver_17_for_sql_server	17.0.0.0
Microsoft	Microsoft ODBC Driver 18 for SQL Server	18.0.0.0
microsoft	odbc	17.0, 18.0, 18.0
microsoft	ole_db_driver_18_for_sql_server	18.0.0
Microsoft	Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)	11.0.0

…and 4 more