7.3
CVE-2023-21568
- EPSS 0.58%
- Veröffentlicht 14.02.2023 20:15:11
- Zuletzt bearbeitet 21.11.2024 07:43:06
- Quelle secure@microsoft.com
- CVE-Watchlists
- Unerledigt
LoginMicrosoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Sql Server 2019 Integration Services Version- SwPlatformvisual_studio
Microsoft ≫ Sql Server 2022 Integration Services Version- SwPlatformvisual_studio
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.58% | 0.684 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| secure@microsoft.com | 7.3 | 1.3 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.