Microsoft SQL Server CVEs

Three-year CVE watchlist for Microsoft SQL Server and its database services used in business infrastructure.

Dedicated CVE watchlist

Microsoft SQL Server CVEs

Three-year CVE watchlist for Microsoft SQL Server and its database services used in business infrastructure.

Server administration
CategorySwitch between product-focused CVE watchlists.
Showsorted by operational relevance for DataHouse infrastructure
CVE-2024-58385CVSS 9.3Windows

CVE-2024-58385

Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitizati...

Updated: 2026-09-21

Security newsletter

Get new CVE alerts before they become an incident

We send selected infrastructure threats in English, with practical notes for DataHouse environments.

  • DataHouse: server administration and secure cloud
  • Hostilla.pl: hosting and mail services
  • SecDNS.pl: free DNS security layer