Lucene search
MicrosoftMS:CVE-2024-28909HistoryApr 09, 2024 - 7:00 a.m.
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
2024-04-0907:00:00
Microsoft
msrc.microsoft.com
10
ole db driver
sql server
remote code execution
vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
39.1%
Affected configurations
Node
microsoftole_db_driver_18_for_sql_serverRange<18.7.0002.0
ORmicrosoftole_db_driver_19_for_sql_serverRange<19.3.0003.0
ORmicrosoftsql_server_2022Range<16.0.1115.1
ORmicrosoftsql_server_2019Range<15.0.2110.4
ORmicrosoftmicrosoft_sql_server_2017_\(cu\)Range<16.0.4120.1x64
ORmicrosoftmicrosoft_sql_server_2017_\(cu\)Range<15.0.4360.2x64
Related
nvd
nvd
CVE-2024-28909
2024-04-09 17:15:50
cve
cve
CVE-2024-28909
2024-04-09 17:15:50
cvelist
cvelist
vulnrichment
vulnrichment
mskb
mskb
nessus
nessus
Security Updates for Microsoft SQL Server OLE DB Driver (April 2024)
2024-04-10 00:00:00
kaspersky
kaspersky
KLA65509 Multiple vulnerabilities in Microsoft SQL Server
2024-04-09 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - April 2024
2024-04-09 20:28:17
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
39.1%
Related for MS:CVE-2024-28909