Microsoft SQL Server SQL注入漏洞

🗓️ 12 Aug 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 41 Views

SQL injection in Microsoft SQL Server allows privilege escalation; affects multiple 2016-2022 versions listed.

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.	22 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-49759	12 Aug 202516:01	–	circl
CVE	CVE-2025-49759	12 Aug 202517:09	–	cve
Cvelist	CVE-2025-49759 Microsoft SQL Server Elevation of Privilege Vulnerability	12 Aug 202517:09	–	cvelist
EUVD	EUVD-2025-24359	3 Oct 202520:07	–	euvd
Microsoft KB	KB5063756 - Description of the security update for SQL Server 2022 GDR: August 12, 2025	12 Aug 202507:00	–	mskb
Microsoft KB	KB5063757 - Description of the security update for SQL Server 2019 CU32: August 12, 2025	12 Aug 202507:00	–	mskb
Microsoft KB	KB5063758 - Description of the security update for SQL Server 2019 GDR: August 12, 2025	12 Aug 202507:00	–	mskb
Microsoft KB	KB5063759 - Description of the security update for SQL Server 2017 CU31: August 12, 2025	12 Aug 202507:00	–	mskb
Microsoft KB	KB5063760 - Description of the security update for SQL Server 2017 GDR: August 12, 2025	12 Aug 202507:00	–	mskb

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49759
vigilance	www.vigilance.fr/vulnerability/Microsoft-SQL-Server-vulnerabilities-of-August-2025-47935

25 May 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.8

EPSS0.01103

SSVC

Microsoft SQL Server Injection vulnerability Privilege escalation Version 2017 Version 2019 Version 2022