The vulnerability of the Microsoft SQL Server Management Studio (SSMS) database management tool, related to the lack of measures taken to neutralize special elements, allows attackers to increase their privileges.

The vulnerability of the Microsoft SQL Server Management Studio SSMS management tool is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2020-1455: Undefined Security Weakness

A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...

CVE-2019-1376: Improper Handling of Exceptional Conditions

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313...

CVE-2019-1313: Improper Handling of Exceptional Conditions

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376...

PT-2019-3646

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description An information disclosure issue exists due to improper permission enforcement. This could allow a remote attacker to access protected information. Recommendatio...

PT-2019-3644

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description The issue is related to an information disclosure problem in Microsoft SQL Server Management Studio. It occurs due to improper permission enforcement, which cou...

The vulnerability of Microsoft SQL Server Management Studio, related to errors in restricting XML references to external objects (XXE), allows attackers to disclose sensitive information.

The vulnerability of Microsoft SQL Server Management Studio is related to errors in restricting XML references to external objects XXE. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using a specially crafted file...

Microsoft SQL Server Management Studio 17.9 / 18.0 Preview 4 XML Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-SQL-SERVER-MGMT-STUDIO-XMLA-FILETYPE-XML-INJECTION-CVE-2018-8532.txt + ISR: ApparitionSec + Zero Day Initiative Program Vendor www.microsoft.com Product SQL Server...

Microsoft SQL Server Management Studio 17.9 - .xel XML External Entity Injection Vulnerability

Exploit for windows platform in category web applications Exploit Title: Microsoft SQL Server Management Studio 17.9 - '.xel' XML External Entity Injection Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Venodor: www.microsoft.com Software: SQL Server Management Studio 17.9 and...

CVE-2018-8527: Improper Restriction of XML External Entity Reference

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQ...

CVE-2018-8532: Improper Restriction of XML External Entity Reference

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, S...

CVE-2018-8533: Improper Restriction of XML External Entity Reference

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, S...

PT-2018-1727

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Management Studio affected versions not specified Description: The issue is related to insufficient restriction of XML external entity XXE references in Microsoft SQL Server Management Studio. This could allow a remote...

PT-2018-2122

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description The issue is related to errors in XML link restrictions on external objects XXE in Microsoft SQL Server Management Studio. Exploitation of this issue may allow ...

PT-2018-2125

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description The issue is related to XML External Entity XXE errors, which can allow a remote attacker to disclose protected information using a specially crafted file...