Medium (6.5) in microsoft sql server. EPSS 18% chance of exploitation in the next 30 days.
Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Services Information Disclosure Vulnerability."
Severity
CVSS 3.0
6.5 medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)