The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2024-38255,     CVE-2024-43459, CVE-2024-43462, CVE-2024-48993,     CVE-2024-48994, CVE-2024-48995, CVE-2024-48996,     CVE-2024-48997, CVE-2024-48998, CVE-2024-48999,     CVE-2024-49000, CVE-2024-49001, CVE-2024-49002,     CVE-2024-49003, CVE-2024-49004, CVE-2024-49005,     CVE-2024-49006, CVE-2024-49007, CVE-2024-49008,     CVE-2024-49009, CVE-2024-49010, CVE-2024-49011,     CVE-2024-49012, CVE-2024-49013, CVE-2024-49014,     CVE-2024-49015, CVE-2024-49016, CVE-2024-49017,     CVE-2024-49018, CVE-2024-49021, CVE-2024-49043)

Detections

Analytics

Security Updates for Microsoft SQL Server (November 2024)

high Nessus Plugin ID 211472

Version 1.1