CVE-2018-8533

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an…

published October 10, 2018

CVSS

—

EPSS

23%

Percentile

97.8

In the wild

Unconfirmed

What it is

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8532.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.23373 · 97.8th percentile
Published: 2018-10-10T13:00Z

EPSS history

Timeline

10 OCT 13:00Z
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an…
cvelistv5