CVE-2015-9098 - CVE House
Back to Database
Status published Critical CVE-2015-9098

In Redgate SQL Monitor before 3.10 and 4.x before 4.2,...

Vulnerability Description

In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in the ability to execute arbitrary SQL commands on any monitored Microsoft SQL Server machines. If the Base Monitor is connecting to these machines using an account with SQL admin privileges, then code execution on the operating system can result in full system compromise (if Microsoft SQL Server is running with local administrator privileges).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-9098

Credits & Attribution

No credits recorded in the NVD database.

References

More from red-gate

View All →
CVE-2022-47870
A Cross Site Scripting (XSS) vulnerability in the web SQL...
Unknown 0
CVE-2022-47542
Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access...
Unknown 0
CVE-2020-9318
Red Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative...
High 7.2
CVE-2020-15526
In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope...
Medium 5.9
CVE-2018-14581
Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow...
High 7.8

Affected Vendor

Affected Software

sql monitor
Vulnerable Versions:
0, 4.0, 4.1

Timeline

Official Publish: June 22nd, 2017
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.