Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sql_server:2005:sp4:x64:*:*:*:*:*

part: a version: 2005 update: sp4

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSql Server (fd983e7c-5172-5f6b-b132-c409278d1646)
Editionx64
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2552 vulnerable 2026-06-08 05:02:04.806239 Details available
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
Published: 2012-10-09T21:00:00.000Z
Updated: 2024-08-06T19:34:25.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1280 vulnerable 2026-06-08 04:57:57.480278 Details available
The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."
Published: 2011-06-16T20:21:00.000Z
Updated: 2024-08-06T22:21:34.188Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.