Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2017-8516

Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerability when it improperly enforces permissions, aka "Microsoft SQL Server Analysis Services Information Disclosure Vulnerability".

  • Published: Aug 8, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-8516
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
microsoft / sql_server 2016-sp1 2016-sp1.x
microsoft / sql_server 2016 2016.x
microsoft / sql_server 2012-sp3 2012-sp3.x
microsoft / sql_server 2014-sp1 2014-sp1.x
microsoft / sql_server 2014-sp2 2014-sp2.x