CVE-2023-36417

2023-10-1018:15:12

CWE-122

[email protected]

web.nvd.nist.gov

cve-2023-36417

sql

ole db

remote code execution

vulnerability

microsoft

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

45.0%

JSON

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Affected configurations

Nvd

Node

microsoftole_db_driver_for_sql_serverRange18.0.0–18.6.0007.0

microsoftole_db_driver_for_sql_serverRange19.0.0–19.3.0002.0

microsoftsql_serverMatch2019x64

microsoftsql_serverMatch2022x64

VendorProductVersionCPE
microsoftole_db_driver_for_sql_server*cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*
microsoftsql_server2019cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*
microsoftsql_server2022cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*

Vendor	Product	Version	CPE
microsoft	ole_db_driver_for_sql_server	*	cpe:2.3:a:microsoft:ole_db_driver_for_sql_server::::::::
microsoft	sql_server	2019	cpe:2.3:a:microsoft:sql_server:2019::::::x64:
microsoft	sql_server	2022	cpe:2.3:a:microsoft:sql_server:2022::::::x64: