CVE-2022-29143

HighCVSS 7.5/10Last modified Nov 2, 2026

Description

Microsoft SQL Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft SQL Server 2017 (GDR)>= 14.0.0, < 14.0.2042.3
MicrosoftMicrosoft SQL Server 2014 Service Pack 3 (GDR)>= 12.0.0, < 12.0.6169.19
MicrosoftMicrosoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)>= 13.0.0, < 13.0.5108.50
MicrosoftMicrosoft SQL Server 2014 Service Pack 3 (CU 4)>= 12.0.0, < 12.0.6439.10
MicrosoftMicrosoft SQL Server 2019 (GDR)>= 15.0.0, < 15.0.2095.3
MicrosoftMicrosoft SQL Server 2019 (CU 16)>= 15.0.0.0, < 15.0.4236.7
MicrosoftMicrosoft SQL Server 2017 (CU 29)>= 14.0.0.0, < 14.0.3445.2
MicrosoftMicrosoft SQL Server 2016 Service Pack 2 (CU 17)>= 13.0.0.0, < 13.0.5893.48
MicrosoftMicrosoft SQL Server 2016 Service Pack 3 (GDR)>= 13.0.0, < 13.0.6419.1
MicrosoftMicrosoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack>= 13.0.0, < 13.0.7016.1

References

Timeline

Published
Jun 15, 2022
Last modified
Nov 2, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-291447.5Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-291457.5.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-291468.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-291473.1Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2022-291487.8Visual Studio Remote Code Execution VulnerabilityCVE-2022-291497.8Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityCVE-2022-29158.8A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of ServiCVE-2022-291507.0Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityCVE-2022-291517.0Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityCVE-2022-291526.1The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.CVE-2022-291537.5HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent fCVE-2022-291547.4An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connec