CVE-2023-23384

En bref

Sévérité
HIGH 7.3
EPSS
EPSS 0.87 % · centile 59 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
microsoft
Statut NVD
Modified

Description

Microsoft SQL Server Remote Code Execution Vulnerability

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:Cmicrosoft
CVSS 3.1HIGH 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LNVD · secure@microsoft.com (Secondary)
CVSS 3.1HIGH 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LNVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Microsoft · Microsoft SQL Server 2008 Service Pack 4 (QFE)affected 10.0.0 < 10.0.6814.4
Microsoft · Microsoft SQL Server 2012 Service Pack 4 (QFE)affected 11.0.0 < 11.0.7512.11
Microsoft · Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)affected 11.0.0 < 11.0.7512.11
Microsoft · Microsoft SQL Server 2017 (GDR)affected 14.0.0 < 14.0.2047.8
Microsoft · Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)affected 10.0.0 < 10.50.6785.2
Microsoft · Microsoft SQL Server 2014 Service Pack 3 (GDR)affected 12.0.0 < 12.0.6444.4
Microsoft · Microsoft SQL Server 2014 Service Pack 3 (CU 4)affected 12.0.0 < 12.0.6174.8
Microsoft · Microsoft SQL Server 2019 (GDR)affected 15.0.0 < 15.0.2101.7
Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR)affected 13.0.0 < 13.0.6430.49
Microsoft · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Packaffected 13.0.0 < 13.0.7024.30
Microsoft · Microsoft SQL Server 2017 (CU 31)affected 14.0.0 < 14.0.3460.9
Microsoft · Microsoft SQL Server 2019 (CU 18)affected 15.0.0 < 15.0.4280.7
Microsoft · Microsoft SQL Server 2022 (GDR)affected 16.0.0 < 16.0.1050.5

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD