Vulnerability-Lookup

WID-SEC-W-2024-0842

Vulnerability from csaf_certbund - Published: 2024-04-09 22:00 - Updated: 2024-07-30 22:00

Summary

Microsoft SQL Server: Mehrere Schwachstellen ermöglichen Codeausführung

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft. Der Microsoft SQL Server (kurz MSSQL Server) ist ein relationales Datenbank Management System.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) ausnutzen, um beliebigen Programmcode auszuführen.

Betroffene Betriebssysteme: - Linux - MacOS X - Windows

CVE-2024-28906

In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28908

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28909

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28910

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28911

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28912

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28913

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28914

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28915

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28926

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28927

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28929

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28930

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28931

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28932

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28933

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28934

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28935

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28936

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28937

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28938

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28939

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28940

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28941

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28942

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28943

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28944

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-28945

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29043

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29044

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29045

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29046

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29047

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29048

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29982

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29983

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29984

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

CVE-2024-29985

Affected products

Known affected 9 products

Product	Identifier	Version
Microsoft SQL Server (MSSQL) OLE DB Driver 19 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server`	OLE DB Driver 19
Microsoft SQL Server (MSSQL) OLE DB Driver 18 Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server`	OLE DB Driver 18
HCL BigFix Platform <10.0.12 HCL / BigFix		Platform <10.0.12
Microsoft SQL Server 2019 GDR Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:gdr`	GDR
Microsoft SQL Server 2019 CU 25 Microsoft / SQL Server 2019	`cpe:/a:microsoft:sql_server_2019:cu_25`	CU 25
Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server`	ODBC Driver 18 for SQL Server
Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server Microsoft / SQL Server (MSSQL)	`cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server`	ODBC Driver 17 for SQL Server
Microsoft SQL Server 2022 GDR Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:gdr`	GDR
Microsoft SQL Server 2022 CU 12 Microsoft / SQL Server 2022	`cpe:/a:microsoft:sql_server_2022:cu_12`	CU 12

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://msrc.microsoft.com/update-guide	external
https://support.hcltechsw.com/community?id=commun…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.\r\nDer Microsoft SQL Server (kurz MSSQL Server) ist ein relationales Datenbank Management System.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0842 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0842.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0842 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0842"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory vom 2024-04-09",
        "url": "https://msrc.microsoft.com/update-guide"
      },
      {
        "category": "external",
        "summary": "HCL Security Bulletin vom 2024-07-30",
        "url": "https://support.hcltechsw.com/community?id=community_blog\u0026sys_id=aa32e55c1bf74250534c4159cc4bcbbf"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft SQL Server: Mehrere Schwachstellen erm\u00f6glichen Codeausf\u00fchrung",
    "tracking": {
      "current_release_date": "2024-07-30T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:07:31.437+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0842",
      "initial_release_date": "2024-04-09T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-04-09T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-04-11T22:00:00.000+00:00",
          "number": "2",
          "summary": "Produktzuordnung korrigiert"
        },
        {
          "date": "2024-07-30T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von HCL aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Platform \u003c10.0.12",
                "product": {
                  "name": "HCL BigFix Platform \u003c10.0.12",
                  "product_id": "T036505"
                }
              }
            ],
            "category": "product_name",
            "name": "BigFix"
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "OLE DB Driver 18",
                "product": {
                  "name": "Microsoft SQL Server (MSSQL) OLE DB Driver 18",
                  "product_id": "T029210",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server:ole_db_driver_18_for_sql_server"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "OLE DB Driver 19",
                "product": {
                  "name": "Microsoft SQL Server (MSSQL) OLE DB Driver 19",
                  "product_id": "T029211",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server:ole_db_driver_19_for_sql_server"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ODBC Driver 17 for SQL Server",
                "product": {
                  "name": "Microsoft SQL Server (MSSQL) ODBC Driver 17 for SQL Server",
                  "product_id": "T034025",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server:odbc_driver_17_for_sql_server"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ODBC Driver 18 for SQL Server",
                "product": {
                  "name": "Microsoft SQL Server (MSSQL) ODBC Driver 18 for SQL Server",
                  "product_id": "T034026",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server:odbc_driver_18_for_sql_server"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SQL Server (MSSQL)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "CU 25",
                "product": {
                  "name": "Microsoft SQL Server 2019 CU 25",
                  "product_id": "T034021",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server_2019:cu_25"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "GDR",
                "product": {
                  "name": "Microsoft SQL Server 2019 GDR",
                  "product_id": "T034022",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server_2019:gdr"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SQL Server 2019"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "CU 12",
                "product": {
                  "name": "Microsoft SQL Server 2022 CU 12",
                  "product_id": "T034023",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server_2022:cu_12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "GDR",
                "product": {
                  "name": "Microsoft SQL Server 2022 GDR",
                  "product_id": "T034024",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:sql_server_2022:gdr"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SQL Server 2022"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28906",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28906"
    },
    {
      "cve": "CVE-2024-28908",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28908"
    },
    {
      "cve": "CVE-2024-28909",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28909"
    },
    {
      "cve": "CVE-2024-28910",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28910"
    },
    {
      "cve": "CVE-2024-28911",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28911"
    },
    {
      "cve": "CVE-2024-28912",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28912"
    },
    {
      "cve": "CVE-2024-28913",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28913"
    },
    {
      "cve": "CVE-2024-28914",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28914"
    },
    {
      "cve": "CVE-2024-28915",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28915"
    },
    {
      "cve": "CVE-2024-28926",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28926"
    },
    {
      "cve": "CVE-2024-28927",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28927"
    },
    {
      "cve": "CVE-2024-28929",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28929"
    },
    {
      "cve": "CVE-2024-28930",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28930"
    },
    {
      "cve": "CVE-2024-28931",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28931"
    },
    {
      "cve": "CVE-2024-28932",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28932"
    },
    {
      "cve": "CVE-2024-28933",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28933"
    },
    {
      "cve": "CVE-2024-28934",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28934"
    },
    {
      "cve": "CVE-2024-28935",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28935"
    },
    {
      "cve": "CVE-2024-28936",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28936"
    },
    {
      "cve": "CVE-2024-28937",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28937"
    },
    {
      "cve": "CVE-2024-28938",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28938"
    },
    {
      "cve": "CVE-2024-28939",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28939"
    },
    {
      "cve": "CVE-2024-28940",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28940"
    },
    {
      "cve": "CVE-2024-28941",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28941"
    },
    {
      "cve": "CVE-2024-28942",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28942"
    },
    {
      "cve": "CVE-2024-28943",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28943"
    },
    {
      "cve": "CVE-2024-28944",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28944"
    },
    {
      "cve": "CVE-2024-28945",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-28945"
    },
    {
      "cve": "CVE-2024-29043",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29043"
    },
    {
      "cve": "CVE-2024-29044",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29044"
    },
    {
      "cve": "CVE-2024-29045",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29045"
    },
    {
      "cve": "CVE-2024-29046",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29046"
    },
    {
      "cve": "CVE-2024-29047",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29047"
    },
    {
      "cve": "CVE-2024-29048",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29048"
    },
    {
      "cve": "CVE-2024-29982",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29982"
    },
    {
      "cve": "CVE-2024-29983",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29983"
    },
    {
      "cve": "CVE-2024-29984",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29984"
    },
    {
      "cve": "CVE-2024-29985",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft SQL Server 2019, Microsoft SQL Server 2022 und Microsoft SQL Server (MSSQL) existieren mehrere Schwachstellen. Diese werden von Microsoft nicht im Detail beschrieben. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T029211",
          "T029210",
          "T036505",
          "T034022",
          "T034021",
          "T034026",
          "T034025",
          "T034024",
          "T034023"
        ]
      },
      "release_date": "2024-04-09T22:00:00.000+00:00",
      "title": "CVE-2024-29985"
    }
  ]
}

CVE-2024-28906 (GCVE-0-2024-28906)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28906",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-15T19:09:41.816330Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T18:03:55.132Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:50.853Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28906"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:23.040Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28906"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28906",
    "datePublished": "2024-04-09T17:00:22.006Z",
    "dateReserved": "2024-03-13T01:26:53.025Z",
    "dateUpdated": "2025-05-03T00:39:23.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28908 (GCVE-0-2024-28908)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28908",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-28T14:14:41.182241Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-28T14:14:52.176Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:50.845Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28908"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:23.582Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28908"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28908",
    "datePublished": "2024-04-09T17:00:22.551Z",
    "dateReserved": "2024-03-13T01:26:53.026Z",
    "dateUpdated": "2025-05-03T00:39:23.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28909 (GCVE-0-2024-28909)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28909",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-23T14:12:20.974804Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T18:03:12.000Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:50.997Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28909"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:24.210Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28909"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28909",
    "datePublished": "2024-04-09T17:00:23.090Z",
    "dateReserved": "2024-03-13T01:26:53.026Z",
    "dateUpdated": "2025-05-03T00:39:24.210Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28910 (GCVE-0-2024-28910)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28910",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-25T19:07:39.377477Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T18:03:53.677Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:50.859Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28910"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:24.694Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28910"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28910",
    "datePublished": "2024-04-09T17:00:23.631Z",
    "dateReserved": "2024-03-13T01:26:53.026Z",
    "dateUpdated": "2025-05-03T00:39:24.694Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28911 (GCVE-0-2024-28911)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28911",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-10T19:37:46.768886Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:22:39.160Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:50.912Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28911"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:25.332Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28911"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28911",
    "datePublished": "2024-04-09T17:00:24.222Z",
    "dateReserved": "2024-03-13T01:26:53.026Z",
    "dateUpdated": "2025-05-03T00:39:25.332Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28912 (GCVE-0-2024-28912)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28912",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-15T19:06:50.764176Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T18:03:06.013Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:50.810Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28912"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:25.799Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28912"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28912",
    "datePublished": "2024-04-09T17:00:24.771Z",
    "dateReserved": "2024-03-13T01:26:53.026Z",
    "dateUpdated": "2025-05-03T00:39:25.799Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28913 (GCVE-0-2024-28913)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28913",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-10T19:03:03.719582Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-05T17:35:50.797Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:50.842Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28913"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:26.333Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28913"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28913",
    "datePublished": "2024-04-09T17:00:25.350Z",
    "dateReserved": "2024-03-13T01:26:53.027Z",
    "dateUpdated": "2025-05-03T00:39:26.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28914 (GCVE-0-2024-28914)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:51.186Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28914"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28914",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-10T19:56:48.008163Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-12T17:37:48.819Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:26.873Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28914"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28914",
    "datePublished": "2024-04-09T17:00:25.876Z",
    "dateReserved": "2024-03-13T01:26:53.027Z",
    "dateUpdated": "2025-05-03T00:39:26.873Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28915 (GCVE-0-2024-28915)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:00 – Updated: 2025-05-03 00:39

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28915",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-26T16:21:00.629354Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-26T16:21:06.121Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:51.427Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28915"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:39:27.408Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28915"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28915",
    "datePublished": "2024-04-09T17:00:26.477Z",
    "dateReserved": "2024-03-13T01:26:53.027Z",
    "dateUpdated": "2025-05-03T00:39:27.408Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-28926 (GCVE-0-2024-28926)

Vulnerability from cvelistv5 – Published: 2024-04-09 17:01 – Updated: 2025-05-03 00:40

Title

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Summary

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

6 products

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2022 for (CU 12)	Affected: 16.0.0 , < 16.0.4120.1 (custom)
Microsoft	Microsoft SQL Server 2019 (CU 25)	Affected: 15.0.0 , < 15.0.4360.2 (custom)
Microsoft	Microsoft SQL Server 2019 (GDR)	Affected: 15.0.0 , < 15.0.2110.4 (custom)
Microsoft	Microsoft SQL Server 2022 (GDR)	Affected: 16.0.0 , < 16.0.1115.1 (custom)
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	Affected: 19.0.0 , < 19.3.0003.0 (custom)
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	Affected: 18.0.0 , < 18.7.0002.0 (custom)

Date Public

2024-04-09 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28926",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-26T16:18:17.172255Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-26T16:18:25.156Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:03:51.361Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28926"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 for (CU 12)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.4120.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (CU 25)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.4360.2",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2019 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "15.0.2110.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Microsoft SQL Server 2022 (GDR)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.1115.1",
              "status": "affected",
              "version": "16.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "19.3.0003.0",
              "status": "affected",
              "version": "19.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.0002.0",
              "status": "affected",
              "version": "18.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.4120.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.4360.2",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "15.0.2110.4",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "16.0.1115.1",
                  "versionStartIncluding": "16.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "19.3.0003.0",
                  "versionStartIncluding": "19.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.0002.0",
                  "versionStartIncluding": "18.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T00:40:13.208Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28926"
        }
      ],
      "title": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-28926",
    "datePublished": "2024-04-09T17:01:12.323Z",
    "dateReserved": "2024-03-13T01:26:53.030Z",
    "dateUpdated": "2025-05-03T00:40:13.208Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2024-0842

CVE-2024-28906 (GCVE-0-2024-28906)

CVE-2024-28908 (GCVE-0-2024-28908)

CVE-2024-28909 (GCVE-0-2024-28909)

CVE-2024-28910 (GCVE-0-2024-28910)

CVE-2024-28911 (GCVE-0-2024-28911)

CVE-2024-28912 (GCVE-0-2024-28912)

CVE-2024-28913 (GCVE-0-2024-28913)

CVE-2024-28914 (GCVE-0-2024-28914)

CVE-2024-28915 (GCVE-0-2024-28915)

CVE-2024-28926 (GCVE-0-2024-28926)

Tags

Sightings

Nomenclature