Require suggestion to install SQL security patches on IBCM server..
Question
We have stand-alone IBCM server in our enviroment.vulnerability with SQL server
Plugin Output:
KB : 5021037
– C:Program FilesMicrosoft SQL ServerMSSQL12.MSSQLSERVERMSSQLBinnsqlservr.exe has not been patched.
Remote version : 2014.120.6024.0
Should be : 2014.120.6174.8
SQL Server Version : 12.0.6024.0 Express Edition
SQL Server Instance : MSSQLSERVER
for that we trying to install-
KB patch – kb5021037,kb5014165
refer below URL.
https://support.microsoft.com/en-us/topic/kb5021037-description-of-the-security-update-for-sql-server-2014-sp3-gdr-february-14-2023-e83e82b3-5d6d-467e-8e48-05fa0b11ebc3
sqlserver2014-kb5014165-x64_fc8bbcd8daea514501ecaaa43e72d0078d7edec0.exe
sqlserver2014-kb5014165-x86_d90ec899206ea70f86f11e3a62601ba59aec0521.exe
error- when we trying to start SQL agent or sql service unable to start.. here we confused. pls advise how to deal with update SQL security update on IBCM server…
Answer ( 1 )
Hi,
Is it sql only for which you are doing VAPT or for entire IBCM Server.
I mean, did you made changes to SSL/TLS settings , if that works for you….