| Package | Affected versions | Patched versions |
|---|---|---|
| configuration manager 2403 | < 5.00.9128.1035 | 5.00.9128.1035 |
| configuration manager 2409 | < 5.00.9132.1029 | 5.00.9132.1029 |
| configuration manager 2503 | < 5.00.9135.1008 | 5.00.9135.1008 |
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free