products / mssql
Microsoft SQL Server
SQL Server is Microsoft's flagship relational engine. NVD lists it as microsoft:sql_server with dotted build numbers (e.g. 15.0.4123.1), not marketing years alone. Pass the same build string you use in SELECT @@VERSION parsing.
api usage
Querying SQL Server
product slug
mssqlversion format
15.0.4123.1bash
curl "https://api.attestd.io/v1/check?product=mssql&version=15.0.4123.1" \
-H "Authorization: Bearer $ATTESTD_KEY"Spot-check CVE-2023-36728 (denial of service class). Pass dotted build numbers from @@VERSION; the API maps major versions (e.g. 15.x → 2019 train) when matching NVD year-keyed ranges. Illustrative JSON below. Replace with live /v1/check output after deployment.
json
{
"product": "mssql",
"version": "15.0.4123.1",
"supported": true,
"risk_state": "high",
"risk_factors": [
"remote_code_execution",
"no_authentication_required",
"internet_exposed_service",
"patch_available"
],
"actively_exploited": false,
"remote_exploitable": true,
"authentication_required": false,
"patch_available": true,
"fixed_version": null,
"confidence": 0.5,
"cve_ids": [
"CVE-2021-1636",
"CVE-2022-23276",
"CVE-2022-29143",
"CVE-2023-21528",
"CVE-2023-21704",
"CVE-2023-21705",
"CVE-2023-21713",
"CVE-2023-21718",
"CVE-2023-23384",
"CVE-2023-29349",
"CVE-2023-29356",
"CVE-2023-32025",
"CVE-2023-32026",
"CVE-2023-32027",
"CVE-2023-32028",
"CVE-2023-36417",
"CVE-2023-36420",
"CVE-2023-36728",
"CVE-2023-36730",
"CVE-2023-36785",
"CVE-2023-38169"
],
"cves": null,
"max_epss": 0.06153,
"last_updated": "2026-08-16T11:18:08.825063Z",
"supply_chain": {
"compromised": false,
"sources": [],
"malware_type": null,
"description": null,
"advisory_url": null,
"compromised_at": null,
"removed_at": null,
"source_published_at": null,
"observed_at": null,
"ingested_at": null,
"first_served_at": null,
"provenance": null
},
"supply_chain_monitored": true,
"typosquat": null
}cleaner line
Newer build
bash
curl "https://api.attestd.io/v1/check?product=mssql&version=16.0.1000.1" \
-H "Authorization: Bearer $ATTESTD_KEY"notable cves
CVE history
| CVE | Description | Affects | CVSS |
|---|---|---|---|
CVE-2023-36728 | SQL Server engine denial of service / stability issue. | 2019 CU line (see NVD) | 7.5 |
CVE-2024-21315 | SQL Server remote code execution (patch cycle). | 2022, 2019 | 8.8 |
CVE-2023-21528 | Elevation of privilege in SQL Server components. | 2019, 2022 | 8.8 |
CVE-2022-41064 | Information disclosure via SQL Server protocol paths. | 2019, 2022 | 7.5 |
CVE-2021-1636 | SQL Server reporting services vulnerability chain. | 2019 | 8.8 |
related