CVE-2019-1068 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 98.89%

Affected Products (NVD)

Vendor	Product	Version
microsoft	sql_server	𝑥 ≤
microsoft	sql_server	𝑥 ≤
microsoft	sql_server_2016	13.0.4001.0 ≤ 𝑥 ≤ < 13.0.4259.0
microsoft	sql_server_2016	13.0.4411.0 ≤ 𝑥 ≤ < 13.0.4604.0
microsoft	sql_server_2016	13.0.5026.0 ≤ 𝑥 ≤ < 13.0.5101.9
microsoft	sql_server_2016	13.0.5149.0 ≤ 𝑥 ≤ < 13.0.5366.0
microsoft	sql_server_2017	14.0.1000.169 ≤ 𝑥 ≤ < 14.0.2027.2
microsoft	sql_server_2017	14.0.3006.16 ≤ 𝑥 ≤ < 14.0.3192.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Vulnerability Media Exposure

[ENGLISH] CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products
CISA added six new bugs to its Known Exploited Vulnerabilities catalog on August 26, showing signs of active exploitation in the wild
Published: 2026-08-27T10:45:00+00:00
[GERMAN] CISA warnt vor Angriffen auf diverse Software
Angriffe wurden auf Red Hat, MS SQL, Ajax.NET, Linux, Citrix NetScaler und Gitea beobachtet. Admins sollten rasch updaten.
Published: 2026-08-27T07:50:00+00:00
[ENGLISH] CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2019-1068 - A remote code execution vulnerability in
Published: 2026-08-27T12:35:28+05:30

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1068