The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2024-20701,     CVE-2024-21303, CVE-2024-21308, CVE-2024-21317,     CVE-2024-21331, CVE-2024-21332, CVE-2024-21333,     CVE-2024-21335, CVE-2024-21373, CVE-2024-21398,     CVE-2024-21414, CVE-2024-21415, CVE-2024-21425,     CVE-2024-21428, CVE-2024-21449, CVE-2024-28928,     CVE-2024-35256, CVE-2024-35271, CVE-2024-35272,     CVE-2024-37318, CVE-2024-37319, CVE-2024-37320,     CVE-2024-37321, CVE-2024-37322, CVE-2024-37323,     CVE-2024-37324, CVE-2024-37326, CVE-2024-37327,     CVE-2024-37328, CVE-2024-37329, CVE-2024-37330,     CVE-2024-37331, CVE-2024-37332, CVE-2024-37333,     CVE-2024-37334, CVE-2024-37336, CVE-2024-38087,     CVE-2024-38088)

ID	Name	Product	Family	Published	Updated	Severity
216605	Security Updates for Microsoft SQL Server (July 2024)	Nessus	Misc.	2/21/2025	2/24/2025	high
216604	Security Updates for Microsoft SQL Server (July 2024)	Nessus	Windows : Microsoft Bulletins	2/21/2025	2/24/2025	high

Detections

Analytics

Plugins Search

high

high