Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sql_server:2008:sp1:x64:*:*:*:*:*

part: a version: 2008 update: sp1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSql Server (fd983e7c-5172-5f6b-b132-c409278d1646)
Editionx64
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1280 vulnerable 2026-06-08 04:57:57.482461 Details available
The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."
Published: 2011-06-16T20:21:00.000Z
Updated: 2024-08-06T22:21:34.188Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.