Security Updates for Microsoft SQL Server (February 2023)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-21528,...

CVE-2023-21568

Microsoft SQL Server Integration Service VS extension Remote Code Execution Vulnerability...

CVE-2023-21568 Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...

CVE-2023-21568

CVE-2023-21568 affects the Microsoft SQL Server Integration Services Visual Studio extension. The vulnerability stems from improper input validation in the VS extension, enabling a local, user-interactive remote code execution with high impact (C/H/I/H; CVSS v3.1: 7.3). Exploitation details or a ...