OnlyFm252
SQL Server

CVE-2022-29143 — Microsoft SQL Server Remote Code Execution Vulnerability

Important CVSS 7.5 EPSS 0.01961 2022-06 archive

Executive Summary

None

Overview

7.5
CVSS HIGH
Important
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Remote Code Execution
Released Jun 14 2022
Last Updated Jun 14 2022
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.01961 — 0.77731 percentile
NVD CVSS 7.5 HIGH — matches MSRC

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
ATTACK VECTOR
Network
ATTACK COMPLEXITY
High
PRIVILEGES REQUIRED
Low
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
High
AVAILABILITY
High
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 6.5

EPSS Score

0.01961
probability of exploitation in the next 30 days
0.77731 percentile - updated 2026-06-21
View on FIRST.org

Affected Products

12 affected products
Product KB Article Severity Impact Restart Required
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4) 5014164 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR) 5014165 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU 4) 5014164 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) 5014165 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU 17) 5014351 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) 5014365 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) 5014355 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack 5015371 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2017 for x64-based Systems (CU 29) 5014553 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2017 for x64-based Systems (GDR) 5014354 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2019 for x64-based Systems (CU 16) 5014353 (Security Update) Important Remote Code Execution Maybe
Microsoft SQL Server 2019 for x64-based Systems (GDR) 5014356 (Security Update) Important Remote Code Execution Maybe

Patches

10 patches
Article Type Restart
5014164 Security Update Maybe
5014165 Security Update Maybe
5014351 Security Update Maybe
5014365 Security Update Maybe
5014355 Security Update Maybe
5015371 Security Update Maybe
5014553 Security Update Maybe
5014354 Security Update Maybe
5014353 Security Update Maybe
5014356 Security Update Maybe

Known Exploits

Acknowledgments

None

On This Page