VULNERABILITY INTELLIGENCE

CVE-2017-8516

CVSS score7.5 HIGH

EPSS probability8.26%

CISA KEVNot currently listed

Published2017-08-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerability when it improperly enforces permissions, aka "Microsoft SQL Server Analysis Services Information Disclosure Vulnerability".

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

secure@microsoft.com — Third Party Advisory
secure@microsoft.com — URL Repurposed
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — URL Repurposed
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory