Microsoft Sql Server 漏洞

时间轴

去年

版本

200040
7.028
201612
201710
20199

修正

Official Fix141
Temporary Fix0
Workaround4
Unavailable0
Not Defined11

易受攻击性

High6
Functional0
Proof-of-Concept31
Unproven55
Not Defined64

访问向量

Not Defined0
Physical0
Local36
Adjacent1
Network119

身份验证

Not Defined0
High4
Low48
None104

用户交互

Not Defined0
Required46
None110

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤636
≤711
≤840
≤956
≤109

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤58
≤639
≤721
≤866
≤916
≤104

VulDB

≤10
≤20
≤30
≤42
≤57
≤631
≤714
≤836
≤957
≤109

NVD

≤10
≤20
≤30
≤40
≤50
≤64
≤76
≤82
≤97
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤811
≤95
≤100

供应商

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤811
≤943
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k1
<10k9
<25k38
<50k78
<100k30
≥100k0

本日攻击

<1k80
<2k2
<5k21
<10k32
<25k21
<50k0
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (41): 6.0, 6.4.14, 6.5, 7, 7.0, 7.0 SP4, 17.9, 18.0 Preview 4, 18.3, 18.3.1, 18.6, 2000, 2000 SP2, 2005, 2008, 2008 R2, 2008 R2 SP2, 2008 SP3, 2008R2, 2012, 2012 SP1, 2012 SP3, 2012 SP4, 2014, 2014 SP2, 2014 SP3, 2014 SP3 CU4, 2016, 2016 SP1, 2016 SP2, 2016 SP3, 2017, 2017 CU22, 2017 RTM, 2019, 2019 CU8, 2019 RTM, 2022, <=2012 SP3, <=2014 SP2, Server 2014 SP3

Link to Product Website: https://www.microsoft.com/

软件类型: Database Software

已发布BaseTemp漏洞0day今天修正CTICVE
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.04CVE-2024-29985
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-29984
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.04CVE-2024-29983
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.06CVE-2024-29982
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.03CVE-2024-29048
2024-04-098.87.7Microsoft SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-29047
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.06CVE-2024-29046
2024-04-097.56.5Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.05CVE-2024-29045
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.04CVE-2024-29044
2024-04-098.87.7Microsoft ODBC Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-29043
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-28945
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server Remote Code Execution$25k-$100k$5k-$25kUnprovenOfficial Fix0.06CVE-2024-28944
2024-04-098.87.7Microsoft ODBC Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.04CVE-2024-28943
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-28942
2024-04-098.87.7Microsoft ODBC Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.03CVE-2024-28941
2024-04-098.87.7Microsoft OLE DB Driver/SQL Server 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.06CVE-2024-28940
2024-04-096.55.7Microsoft OLE DB Driver/SQL Server 信息公开$5k-$25k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-28939
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 信息公开$25k-$100k$5k-$25kUnprovenOfficial Fix0.03CVE-2024-28938
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-28937
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.07CVE-2024-28936
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.03CVE-2024-28935
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-28934
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.06CVE-2024-28933
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.04CVE-2024-28932
2024-04-098.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 内存损坏$25k-$100k$5k-$25kUnprovenOfficial Fix0.00CVE-2024-28931

131 更多条目未显示

更多条目由 Microsoft

Do you want to use VulDB in your project?

Use the official API to access entries easily!