Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft SQL Server 2016 Service Pack 3 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2016 Service Pack 3 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2016 Service Pack 3 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.0.0
affected
custom
13.0.6475.1
Unavailable
None listed
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
Vendor
Microsoft
Product
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.0.0
affected
custom
13.0.7070.1
Unavailable
None listed
Microsoft SQL Server 2017 (CU 31)
Vendor
Microsoft
Product
Microsoft SQL Server 2017 (CU 31)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2017 (CU 31) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0.0
affected
custom
14.0.3515.1
Unavailable
None listed
Microsoft SQL Server 2017 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2017 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2017 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0.0
affected
custom
14.0.2095.1
Unavailable
None listed
Microsoft SQL Server 2019 (CU 32)
Vendor
Microsoft
Product
Microsoft SQL Server 2019 (CU 32)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2019 (CU 32) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.0.0.0
affected
custom
15.0.4455.2
Unavailable
None listed
Microsoft SQL Server 2019 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2019 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2019 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.0.0
affected
custom
15.0.2155.2
Unavailable
None listed
Microsoft SQL Server 2022 (CU 21)
Vendor
Microsoft
Product
Microsoft SQL Server 2022 (CU 21)
Platforms
Unknown
Default status
Unknown
Microsoft SQL Server 2022 (CU 21) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
16.0.0.0
affected
custom
16.0.4222.2
Unavailable
None listed
Microsoft SQL Server 2022 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2022 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2022 (GDR) · Scoped product and version facts