Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft SQL Server 2017 (CU 31)
Vendor
Microsoft
Product
Microsoft SQL Server 2017 (CU 31)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2017 (CU 31) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0.0
affected
custom
14.0.3550.4
Unavailable
None listed
Microsoft SQL Server 2017 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2017 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2017 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0.0
affected
custom
14.0.2130.4
Unavailable
None listed
Microsoft SQL Server 2019 (CU 32)
Vendor
Microsoft
Product
Microsoft SQL Server 2019 (CU 32)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2019 (CU 32) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.0.0.0
affected
custom
15.0.4490.9
Unavailable
None listed
Microsoft SQL Server 2019 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2019 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2019 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.0.0
affected
custom
15.0.2190.7
Unavailable
None listed
Microsoft SQL Server 2022 (CU 26)
Vendor
Microsoft
Product
Microsoft SQL Server 2022 (CU 26)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2022 (CU 26) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
16.0.0.0
affected
custom
16.0.4275.2
Unavailable
None listed
Microsoft SQL Server 2022 (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2022 (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2022 (GDR) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
16.0.0
affected
custom
16.0.1200.5
Unavailable
None listed
Microsoft SQL Server 2025 (CU8)
Vendor
Microsoft
Product
Microsoft SQL Server 2025 (CU8)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2025 (CU8) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
17.0.0.0
affected
custom
17.0.4085.5
Unavailable
None listed
Microsoft SQL Server 2025 for x64-based Systems (GDR)
Vendor
Microsoft
Product
Microsoft SQL Server 2025 for x64-based Systems (GDR)
Platforms
x64-based Systems
Default status
Unknown
Microsoft SQL Server 2025 for x64-based Systems (GDR) · Scoped product and version facts