KLA10901 Multiple vulnerabilities in Microsoft SQL Server

🗓️ 08 Nov 2016 00:00:00Reported by Kaspersky LabType

Multiple vulnerabilities found in Microsoft SQL Server, allowing for privilege escalation, security bypass, and sensitive information access

Reporter	Title	Published	Views	Family All 68
Tenable Nessus	Microsoft SQL Server 2012 SP2 11.0.5058.0 through 11.0.5387.0 Multiple Privilege Escalation (3194719)	12 Dec 201600:00	–	nessus
Tenable Nessus	Microsoft SQL Server 2012 SP3 11.0.6020.0 through 11.0.6247.0 Multiple Privilege Escalation (3194721)	12 Dec 201600:00	–	nessus
Tenable Nessus	Microsoft SQL Server 2014 SP1 12.0.4100.0 through 12.0.4231.0 Privilege Escalation (3194720)	12 Dec 201600:00	–	nessus
Tenable Nessus	Microsoft SQL Server 2014 SP2 12.0.5000.0 through 12.0.5202.0 Privilege Escalation (3194714)	12 Dec 201600:00	–	nessus
Tenable Nessus	Microsoft SQL Server 2016 13.0.1605.0 through 13.0.1721.0 Multiple Privilege Escalation (3194716)	12 Dec 201600:00	–	nessus
Tenable Nessus	MS16-136: Security Update for SQL Server (3199641) (uncredentialed check)	28 Feb 201900:00	–	nessus
Tenable Nessus	MS16-136: Security Update for SQL Server (3199641)	8 Nov 201600:00	–	nessus
CNVD	Microsoft SQL Server RDBMS Engine Privilege Escalation Vulnerability	9 Nov 201600:00	–	cnvd
CNVD	Microsoft SQL Server Master Data Services Cross-Site Scripting Vulnerability	9 Nov 201600:00	–	cnvd
CNVD	Microsoft SQL Server Information Disclosure Vulnerability	9 Nov 201600:00	–	cnvd

Source	Link
technet	www.technet.microsoft.com/en-us/library/security/ms16-136.aspx
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7254
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7253
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7252
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7251
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7250
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7249
threats	www.threats.kaspersky.com/en/product/Microsoft-SQL-Server/
support	www.support.microsoft.com/kb/3194718
support	www.support.microsoft.com/kb/3194724

22 Jan 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 26.5

CVSS 38.8

EPSS0.17568