Lucene search
HistoryJul 14, 2015 - 11:59 p.m.
CVE-2015-1761
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.014
Percentile
86.4%
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pointers, which allows remote authenticated users to gain privileges by leveraging certain write access, aka “SQL Server Elevation of Privilege Vulnerability.”
Affected configurations
Node
microsoftsql_serverMatch2008r2_sp2
ORmicrosoftsql_serverMatch2008r2_sp3
ORmicrosoftsql_serverMatch2008sp3
ORmicrosoftsql_serverMatch2008sp4
ORmicrosoftsql_serverMatch2012sp1
ORmicrosoftsql_serverMatch2012sp2
ORmicrosoftsql_serverMatch2014
Related
symantec
symantec
Microsoft SQL Server CVE-2015-1761 Privilege Escalation Vulnerability
2015-07-14 00:00:00
cve
cve
CVE-2015-1761
2015-07-14 23:59:00
cvelist
cvelist
CVE-2015-1761
2015-07-14 23:00:00
prion
prion
Privilege escalation
2015-07-14 23:59:00
nessus
nessus
mskb
mskb
openvas
openvas
Microsoft SQL Server Multiple Vulnerabilities (MS15-058)
2015-07-15 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.014
Percentile
86.4%
Related for NVD:CVE-2015-1761