CVE-2018-8527

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8532, CVE-2018-8533.

CVSS v3.0

5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

23.37% chance of exploitation in the next 30 days, 98th percentile

Published

2018-10-10

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/45585

References

• CVE Record
• NVD entry

Related

• CVE-2018-8495
• CVE-2018-8532
• CVE-2018-8474
• CVE-2018-8533
• CVE-2018-8469
• CVE-2018-8544