Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft SQL Server 2016 Service Pack 3 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2016 Service Pack 3 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2016 Service Pack 3 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.0.0
affected
custom
13.0.6470.1
Unavailable
None listed
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
Vendor
Microsoft
Product
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.0.0
affected
custom
13.0.7065.1
Unavailable
None listed
Microsoft SQL Server 2017 (CU 31)
Vendor
Microsoft
Product
Microsoft SQL Server 2017 (CU 31)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2017 (CU 31) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0.0
affected
custom
14.0.3505.1
Unavailable
None listed
Microsoft SQL Server 2017 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2017 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2017 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0.0
affected
custom
14.0.2085.1
Unavailable
None listed
Microsoft SQL Server 2019 (CU 32)
Vendor
Microsoft
Product
Microsoft SQL Server 2019 (CU 32)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2019 (CU 32) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.0.0.0
affected
custom
15.0.4445.1
Unavailable
None listed
Microsoft SQL Server 2019 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2019 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2019 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.0.0
affected
custom
15.0.2145.1
Unavailable
None listed
Microsoft SQL Server 2022 (CU 20)
Vendor
Microsoft
Product
Microsoft SQL Server 2022 (CU 20)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2022 (CU 20) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
16.0.0.0
affected
custom
16.0.4212.1
Unavailable
None listed
Microsoft SQL Server 2022 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2022 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2022 (GDR) · Scoped product and version facts