Microsoft SQL Server Elevation of Privilege Vulnerability

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - An elevation of privilege vulnerability. An authenticated, remote attacker can exploit this issue, to     gain elevated privileges. (CVE-2024-37341, CVE-2024-37965, CVE-2024-37980)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft SQL Server installation on the remote host is missing a security update. It is affected by the following vulnerabilities:

  - An elevation of privilege vulnerability. An authenticated, remote attacker can exploit this issue, to     gain elevated privileges. (CVE-2024-37341, CVE-2024-37965, CVE-2024-37980)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207068	Security Updates for Microsoft SQL Server Elevation of Privilege (September 2024) (Remote)	Nessus	Windows : Microsoft Bulletins	critical
207065	Security Updates for Microsoft SQL Server Elevation of Privilege (September 2024)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2024-37341

critical

Tenable Plugins

critical

critical