title: Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
description: Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
problem types: Remote Code Execution
affected:
{
vendor: Microsoft
product: SQL Server Integration Services for Visual Studio 2019
cpes: cpe:2.3:a:microsoft:sql_server:2019:integration_services:*:*:*:*:*:*
platforms: Unknown
versions:
version: 16.0.0, lessThan: 16.0.5035.3, versionType: custom, status: affected
}
{
vendor: Microsoft
product: SQL Server Integration Services for Visual Studio 2022
cpes: cpe:2.3:a:microsoft:sql_server:2022:integration_services:*:*:*:*:*:*
platforms: Unknown
versions:
version: 16.0.0, lessThan: 16.0.5035.3, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
]