← back
CVE-2018-8532

CVE-2018-8532

EPSS 23.4%
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8533.
Affected products
Microsoft · SQL Server Management Studio 17.9Microsoft · SQL Server Management Studio 18.0
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/45587/unverifiedexploitdbwww.exploit-db.com/exploits/45587unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8532https://www.exploit-db.com/exploits/45587/http://www.securityfocus.com/bid/105475http://www.securitytracker.com/id/1041826