Sql Server Management Studio Express

sql_server_management_studio_express

Vendor: Microsoft • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2011-1280

1Microsoft

4Office Infopath

Sql ServerSql Server Management Studio Express+1 more

Apr 29, 2026

Jun 16, 2011

N/A· v4

N/A· v3

4.3 MEDIUM· v2

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."Show less