Microsoft Microsoft SQL Server 2014 Service Pack 3 (GDR)

9 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2023-3672812.0.0 – < 12.0.6179.1Microsoft SQL Server Denial of Service VulnerabilityMEDIUM 5.50.7 %
CVE-2023-23384Microsoft SQL Server Remote Code Execution VulnerabilityHIGH 7.30.9 %
CVE-2023-2171312.0.0 – < 12.0.6444.4Microsoft SQL Server Remote Code Execution VulnerabilityHIGH 8.81.8 %
CVE-2023-21718Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH 7.80.7 %
CVE-2023-2170512.0.0 – < 12.0.6444.4Microsoft SQL Server Remote Code Execution VulnerabilityHIGH 8.81.1 %
CVE-2023-2170412.0.0 – < 12.0.6444.4Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH 7.80.4 %
CVE-2023-21528Microsoft SQL Server Remote Code Execution VulnerabilityHIGH 7.80.4 %
CVE-2022-2914312.0.0 – < 12.0.6169.19Microsoft SQL Server Remote Code Execution VulnerabilityHIGH 7.52.0 %
CVE-2021-163612.0.0 – < publicationMicrosoft SQL Elevation of Privilege VulnerabilityHIGH 8.86.7 %