CVE-2016-7252

—

CVSS 3.0

6.5 medium

EPSS

18%p97

Published

Nov 10, 2016 (Nov 10, 2016)

Modified

Jun 17, 2026

Description

Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Services Information Disclosure Vulnerability."

Vendors: microsoft
Products: sql server
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (17.6%)

In the news0 stories

No ingested article mentions this CVE yet.