cbcvebase.
CVE-2023-36417
published 2023-10-10

CVE-2023-36417: Microsoft SQL OLE DB Remote Code Execution Vulnerability

high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Microsoft SQL OLE DB Remote Code Execution Vulnerability

Affected

14 ranges
VendorProductVersion rangeFixed in
microsoftmicrosoft_ole_db_driver_18_for_sql_server>= 18.0.0 < 18.6.0007.018.6.0007.0
microsoftmicrosoft_ole_db_driver_19_for_sql_server>= 19.0.0 < 19.3.0002.019.3.0002.0
microsoftmicrosoft_sql_server_2019>= 15.0.0 < 15.0.2104.115.0.2104.1
microsoftmicrosoft_sql_server_2019>= 15.0.0 < 15.0.4326.115.0.4326.1
microsoftmicrosoft_sql_server_2022>= 15.0.0 < 16.0.4080.116.0.4080.1
microsoftmicrosoft_sql_server_2022>= 16.0.0 < 16.0.1105.116.0.1105.1
microsoftole_db_driver_for_sql_server>= 18.0.0 < 18.6.0007.018.6.0007.0
microsoftole_db_driver_for_sql_server>= 19.0.0 < 19.3.0002.019.3.0002.0
microsoftsql_server
microsoftsql_server
msrcmicrosoft_ole_db_driver_18_for_sql_server
msrcmicrosoft_ole_db_driver_19_for_sql_server
msrcmicrosoft_sql_server_2019_for_x64-based_systems
msrcmicrosoft_sql_server_2022_for_x64-based_systems