Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
2025-07-08T17:15:59.450
2025-07-17T22:00:09.730
Analyzed
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | sql_server_2016 | < 13.0.6460.7 | Yes |
| Application | microsoft | sql_server_2016 | < 13.0.7055.9 | Yes |
| Application | microsoft | sql_server_2017 | < 14.0.2075.8 | Yes |
| Application | microsoft | sql_server_2017 | < 14.0.3495.9 | Yes |
| Application | microsoft | sql_server_2019 | < 15.0.2135.5 | Yes |
| Application | microsoft | sql_server_2019 | < 15.0.4435.7 | Yes |
| Application | microsoft | sql_server_2022 | < 16.0.1140.6 | Yes |
| Application | microsoft | sql_server_2022 | < 16.0.4200.1 | Yes |