Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "MDS API XSS Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft SQL RDBMS 引擎特权提升漏洞
Vulnerability Description
Microsoft SQL Server是美国微软(Microsoft)公司开发和维护的一套应用在Microsoft Windows系统下的大型商业数据库系统。 Microsoft SQL Server 2016版本的Master Data Services中存在跨站脚本漏洞,该漏洞源于程序没有正确验证SQL Server网址上的请求参数。攻击者可利用该漏洞将客户端脚本注入Internet Explorer用户实例。
CVSS Information
N/A
Vulnerability Type
N/A