An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces metadata permissions, aka 'Microsoft SQL Server Analysis Services Information Disclosure Vulnerability'.
Severity
CVSS 3.0
6.5 medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
5.4% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)