Sep 2024: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2024-37341 Published on September 10, 2024

Microsoft SQL Server Elevation of Privilege Vulnerability
Microsoft SQL Server Elevation of Privilege Vulnerability

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2024-37341 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2024-37341

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft SQL Server 2016 Service Pack 3 (GDR): Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack: Microsoft SQL Server 2017 (CU 31): Microsoft SQL Server 2017 (GDR): Microsoft SQL Server 2019 (CU 28): Microsoft SQL Server 2019 (GDR): Microsoft SQL Server 2022 (GDR): Microsoft SQL Server 2022 for (CU 15):

Exploit Probability

EPSS
1.44%
Percentile
73.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.