cbcvebase.
CVE-2024-37966
published 2024-09-10

CVE-2024-37966: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

high7.1CVSS 3.1
AVNACLPRLUINSUCHINAL
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

Affected

15 ranges
VendorProductVersion rangeFixed in
microsoftmicrosoft_sql_server_2017>= 14.0.0 < 14.0.2060.114.0.2060.1
microsoftmicrosoft_sql_server_2017>= 14.0.0 < 14.0.3475.114.0.3475.1
microsoftmicrosoft_sql_server_2019>= 15.0.0 < 15.0.2120.115.0.2120.1
microsoftmicrosoft_sql_server_2019>= 15.0.0 < 15.0.4390.215.0.4390.2
microsoftmicrosoft_sql_server_2022>= 16.0.0 < 16.0.1125.116.0.1125.1
microsoftmicrosoft_sql_server_2022_for>= 16.0.0 < 16.0.4140.316.0.4140.3
microsoftsql_server_2017>= 14.0.1000.169 < 14.0.2060.114.0.2060.1
microsoftsql_server_2017>= 14.0.3006.16 < 14.0.3475.114.0.3475.1
microsoftsql_server_2019>= 15.0.2000.5 < 15.0.2120.115.0.2120.1
microsoftsql_server_2019>= 15.0.4003.23 < 15.0.4390.215.0.4390.2
microsoftsql_server_2022>= 16.0.1000.6 < 16.0.1125.116.0.1125.1
microsoftsql_server_2022>= 16.0.4003.1 < 16.0.4140.316.0.4140.3
msrcmicrosoft_sql_server_2017_for_x64-based_systems
msrcmicrosoft_sql_server_2019_for_x64-based_systems
msrcmicrosoft_sql_server_2022_for_x64-based_systems