Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:microsoft_sql_server_2022_(cu_20):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductMicrosoft Sql Server 2022 (Cu 20) (219750f5-8e90-5baa-ac0d-61ac37aeb1c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-55227 vulnerable 2026-06-08 07:33:14.419347 Microsoft SQL Server Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-09-09T17:01:32.118Z
Updated: 2026-02-20T16:01:05.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53727 vulnerable 2026-06-08 07:31:15.124493 Microsoft SQL Server Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-08-12T17:09:43.688Z
Updated: 2026-02-13T18:53:58.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49759 vulnerable 2026-06-08 07:29:14.874812 Microsoft SQL Server Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-08-12T17:09:55.851Z
Updated: 2026-02-13T18:54:12.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49758 vulnerable 2026-06-08 07:29:14.873509 Microsoft SQL Server Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-08-12T17:09:42.924Z
Updated: 2026-02-13T18:53:58.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47997 vulnerable 2026-06-08 07:27:15.323133 Microsoft SQL Server Information Disclosure Vulnerability
MEDIUM (6.5)
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
Published: 2025-09-09T17:01:09.074Z
Updated: 2026-02-20T16:00:40.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47954 vulnerable 2026-06-08 07:27:15.116590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24999 vulnerable 2026-06-08 07:12:50.380468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.