Known vulnerabilities in Microsoft SQL Server 2022

Vendor: Microsoft
Version: 2022
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SQL Server version 2022 Microsoft SQL Server 2022 is affected by 4 vulnerabilities: 1 high, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115081 - Command injection
CVE-2025-55227
CWE-77 Medium
No
No
- 09.09.2025 SB2025090982
#VU115079 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47997
CWE-362 Medium
No
No
- 09.09.2025 SB2025090982
SB2025110342
#VU113859 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-47954
CWE-89 Medium
No
No
- 12.08.2025 SB2025081271
#VU85244 - Security Features
CVE-2024-0056
CWE-254 High
No
No
- 10.01.2024 SB2024011005
SB2024011058
SB2024011059
and 10 more