A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability :

  - A remote code execution vulnerability exists in     Microsoft SQL Server when it incorrectly handles     processing of internal functions. An attacker who     successfully exploited this vulnerability could execute     code in the context of the SQL Server Database Engine     service account.  (CVE-2019-1068)

ID	Name	Product	Family	Type	Severity
126631	Security Updates for Microsoft SQL Server (July 2019)	Nessus	Windows : Microsoft Bulletins	Local	high
126630	Security Updates for Microsoft SQL Server (Uncredentialed Check) (July 2019)	Nessus	Windows	Remote	high

Detections

Analytics

CVE-2019-1068

high

Tenable Plugins

high

high