Oct 2019:
CVE-2019-1376 Published on October 10, 2019

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313.

NVD


Products Associated with CVE-2019-1376

Want to know whenever a new CVE is published for Microsoft Sql Server Management Studio? stack.watch will email you.

 

Affected Versions

Microsoft SQL Server Management Studio Version 18.3.1 is affected by CVE-2019-1376

Exploit Probability

EPSS
7.57%
Percentile
91.83%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.