Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sql_server:2008:sp3:x86:*:*:*:*:*

part: a version: 2008 update: sp3

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSql Server (fd983e7c-5172-5f6b-b132-c409278d1646)
Editionx86
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4061 vulnerable 2026-06-08 05:05:44.182305 Details available
Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vulnerability."
Published: 2014-08-12T21:00:00.000Z
Updated: 2024-08-06T11:04:27.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2552 vulnerable 2026-06-08 05:02:04.812038 Details available
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
Published: 2012-10-09T21:00:00.000Z
Updated: 2024-08-06T19:34:25.812Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.