cbcvebase.

Microsoft Sql Server 2017 vulnerabilities

107 known vulnerabilities affecting microsoft/microsoft_sql_server_2017.

Total CVEs
107
CISA KEV
0
Public exploits
0
Exploited in wild
2
Severity breakdown
CRITICAL2HIGH101MEDIUM4

Vulnerabilities

Page 6 of 6
CVE-2023-21704P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.2047.8≥ 14.0.0, < 14.0.3460.92023-02-14
CVE-2023-21704 [HIGH] CWE-190 CVE-2023-21704: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-37966P3HIGHCVSS 7.1≥ 14.0.0, < 14.0.2060.1≥ 14.0.0, < 14.0.3475.12024-09-10
CVE-2024-37966 [HIGH] CWE-125 CVE-2024-37966: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2023-21718P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.2047.8≥ 14.0.0, < 14.0.3460.92023-02-14
CVE-2023-21718 [HIGH] CWE-191 CVE-2023-21718: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2025-47997P4MEDIUMCVSS 5.3≥ 14.0.0, < 14.0.3505.1≥ 14.0.0, < 14.0.2085.12025-09-09
CVE-2025-47997 [MEDIUM] CWE-200 CVE-2025-47997: Concurrent execution using shared resource with improper synchronization ('race condition') in SQL S Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-37337P4MEDIUMCVSS 4.3≥ 14.0.0, < 14.0.2060.1≥ 14.0.0, < 14.0.3475.12024-09-10
CVE-2024-37337 [MEDIUM] CWE-197 CVE-2024-37337: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2024-37342P4MEDIUMCVSS 4.3≥ 14.0.0, < 14.0.2060.1≥ 14.0.0, < 14.0.3475.12024-09-10
CVE-2024-37342 [MEDIUM] CWE-125 CVE-2024-37342: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2023-36728P4MEDIUMCVSS 5.5≥ 14.0.0, < 14.0.2052.1≥ 14.0.0, < 14.0.3465.12023-10-10
CVE-2023-36728 [MEDIUM] CWE-125 CVE-2023-36728: Microsoft SQL Server Denial of Service Vulnerability Microsoft SQL Server Denial of Service Vulnerability
nvd
← Previous6 / 6