CVE-2023-21528

2023-02-1420:15:11

CWE-122

[email protected]

web.nvd.nist.gov

microsoft sql server

remote code execution

vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

48.6%

JSON

Microsoft SQL Server Remote Code Execution Vulnerability

Affected configurations

Nvd

Node

microsoftsql_serverMatch2008sp4

microsoftsql_serverMatch2012sp4

microsoftsql_serverMatch2014sp3

microsoftsql_serverMatch2016sp3x64

microsoftsql_serverMatch2017x64

microsoftsql_serverMatch2019x64

microsoftsql_serverMatch2022x64

VendorProductVersionCPE
microsoftsql_server2008cpe:2.3:a:microsoft:sql_server:2008:sp4:*:*:*:*:*:*
microsoftsql_server2012cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*
microsoftsql_server2014cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*
microsoftsql_server2016cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*
microsoftsql_server2017cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*
microsoftsql_server2019cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*
microsoftsql_server2022cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*

Vendor	Product	Version	CPE
microsoft	sql_server	2008	cpe:2.3:a:microsoft:sql_server:2008:sp4::::::
microsoft	sql_server	2012	cpe:2.3:a:microsoft:sql_server:2012:sp4::::::
microsoft	sql_server	2014	cpe:2.3:a:microsoft:sql_server:2014:sp3::::::
microsoft	sql_server	2016	cpe:2.3:a:microsoft:sql_server:2016:sp3:::::x64:*
microsoft	sql_server	2017	cpe:2.3:a:microsoft:sql_server:2017::::::x64:
microsoft	sql_server	2019	cpe:2.3:a:microsoft:sql_server:2019::::::x64:
microsoft	sql_server	2022	cpe:2.3:a:microsoft:sql_server:2022::::::x64: