CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Microsoft. Its EPSS score suggests a 11.9% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2016-7253
Severity
HIGH
CVSS
8.8
EPSS
11.86%
Microsoft
Original NVD Description
The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Server Agent Elevation of Privilege Vulnerability."