Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft SQL Server 2012 Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (CU 4) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (CU 22) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 Service Pack 2 (CU 15) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 (CU 8) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 (GDR) | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2021-7103 | Microsoft SQL Elevation of Privilege Vulnerability |
Mon, 02 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 22 Nov 2024 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 08 Oct 2024 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 08 Oct 2024 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:* |
cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:* |
| References |
|
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-11-02T17:58:49.530Z
Reserved: 2020-12-02T00:00:00.000Z
Link: CVE-2021-1636
Vulnrichment
Updated: 2024-08-03T16:18:10.906Z
NVD
Status : Modified
Published: 2021-01-12T20:15:30.167
Modified: 2026-11-02T18:18:32.740
Link: CVE-2021-1636
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')