Vulnerability Details CVE-2019-1068
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.528
EPSS Ranking 98.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
Proposed Action
Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.
Ransomware Campaign
Unknown
References
Products affected by CVE-2019-1068
-
cpe:2.3:a:microsoft:sql_server:2014
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4001.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4202.2
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4206.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4210.6
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4224.16
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4411.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4422.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4435.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4446.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4451.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4457.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4466.4
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4474.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4502.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4514.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4522.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4528.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4541.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4550.1
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4560.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.4574.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5026.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5081.1
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5149.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5153.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5201.2
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5216.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5233.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5264.1
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5292.0
-
cpe:2.3:a:microsoft:sql_server_2016:13.0.5337.0
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.1000.169
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.2000.63
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.2002.14
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.2014.14
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3006.16
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3008.27
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3015.40
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3022.28
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3023.8
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3025.34
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3026.27
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3029.16
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3030.27
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3035.2
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3037.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3038.14
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3045.24
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3048.4
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3076.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3103.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3162.1