← CVE Intelligence

CVE-2025-47997

Microsoft SQL Server Information Disclosure Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR)	affected 13.0.0 before 13.0.6470.1
Microsoft / Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack	affected 13.0.0 before 13.0.7065.1
Microsoft / Microsoft SQL Server 2017 (CU 31)	affected 14.0.0 before 14.0.3505.1
Microsoft / Microsoft SQL Server 2017 (GDR)	affected 14.0.0 before 14.0.2085.1
Microsoft / Microsoft SQL Server 2019 (CU 32)	affected 15.0.0.0 before 15.0.4445.1
Microsoft / Microsoft SQL Server 2019 (GDR)	affected 15.0.0 before 15.0.2145.1
Microsoft / Microsoft SQL Server 2022 (CU 20)	affected 16.0.0.0 before 16.0.4212.1
Microsoft / Microsoft SQL Server 2022 (GDR)	affected 16.0.0 before 16.0.1150.1

CWE

CWE-362, CWE-200

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47997

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.