Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) vulnerabilities

2 known vulnerabilities in Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) from Microsoft. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft SQL Server Reporting Services Remote Code Execution Exploited

  CVE-2020-0618Feb 11, 2020MicrosoftEPSS 99%

  A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

• 8.8 High severity

  Microsoft SQL Server Remote Code Execution Exploited

  CVE-2019-1068Jul 15, 2019MicrosoftEPSS 57.3%

  A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.