CVE-2022-29143
HIGH
MEDIUM
Priority: 0.17
BB Relevance:
55/100
Published: 2022-06-15
Modified: 2026-11-02
First seen: 2026-11-02
Status: active
Attack Surface
Network
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
Microsoft SQL Server Remote Code Execution Vulnerability
Affected Software (15)
| Vendor | Product | Version |
|---|---|---|
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (CU 4) | 12.0.0 < 12.0.6439.10 |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (GDR) | 12.0.0 < 12.0.6169.19 |
| Microsoft | Microsoft SQL Server 2016 Service Pack 2 (CU 17) | 13.0.0.0 < 13.0.5893.48 |
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 (GDR) | 13.0.0 < 13.0.6419.1 |
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack | 13.0.0 < 13.0.7016.1 |
| Microsoft | Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) | 13.0.0 < 13.0.5108.50 |
| Microsoft | Microsoft SQL Server 2017 (CU 29) | 14.0.0.0 < 14.0.3445.2 |
| Microsoft | Microsoft SQL Server 2017 (GDR) | 14.0.0 < 14.0.2042.3 |
| Microsoft | Microsoft SQL Server 2019 (CU 16) | 15.0.0.0 < 15.0.4236.7 |
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0 < 15.0.2095.3 |
| microsoft | sql_server | 2014 |
| microsoft | sql_server | 2016 |
| microsoft | sql_server | 2016 |
| microsoft | sql_server | 2017 |
| microsoft | sql_server | 2019 |
References & Advisories (2)
Patch
Vendor Advisory