CVE-2025-49719NVD

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.

Severity Level

HIGH(7.5)

Published Date

Jul 8, 2025

Last Modified

Jul 17, 2025

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVE Watchtower