| Package | Affected versions | Patched versions |
|---|---|---|
| sql server 2016 | ≥ 13.0.6300.2, < 13.0.6485.1≥ 13.0.7000.253, < 13.0.7080.1 | 13.0.6485.113.0.7080.1 |
| sql server 2017 | ≥ 14.0.1000.169, < 14.0.2105.1≥ 14.0.3006.16, < 14.0.3525.1 | 14.0.2105.114.0.3525.1 |
| sql server 2019 | ≥ 15.0.2000.5, < 15.0.2165.1≥ 15.0.4003.23, < 15.0.4465.1 | 15.0.2165.115.0.4465.1 |
| sql server 2022 | ≥ 16.0.1000.6, < 16.0.1175.1≥ 16.0.4003.1, < 16.0.4250.1 | 16.0.1175.116.0.4250.1 |
| sql server 2025 | ≥ 17.0.1000.7, < 17.0.1110.1≥ 17.0.4006.2, < 17.0.4030.1 | 17.0.1110.117.0.4030.1 |
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free