Article - CS408873

How to fix vulnerabilities reported for MSSQL Server while using Windchill Modeler

Modified: 31-Jul-2024   


Applies To

  • PTC Modeler 9.3 to 10.0

Description

  • How to fix vulnerabilities reported for Microsoft SQL Server while using Windchill Modeler
  • Need help in fixing below listed vulnerabilities reported for Windchill modeler 9.3 Application
1. Microsoft Security Update for SQL Server (MS16-136)
2. Microsoft Security Update for SQL Server (ADV180002) (Spectre/Meltdown)
3. Microsoft SQL Server, ODBC and OLE DB Driver for SQL Server Multiple Vulnerabilities 
4. Microsoft Security Update for SQL Server for July 2019
5. EOL/Obsolete Software: Microsoft SQL Server 2014 Service Pack 2 (SP2) Detected
  • Following vulnerabilities are observed for MS SQL Server bundled with Windchill Modeler 10.0 :
    • Microsoft SQL Server ODBC and OLE DB Driver for SQL Server Multiple Vulnerabilities for April 2024 :
      • CVE-2024-28906, CVE-2024-28908, CVE-2024-28909, CVE-2024-28910, CVE-2024-28911, CVE-2024-28912, CVE-2024-28913, CVE-2024-28914, CVE-2024-28915, CVE-2024-28926, CVE-2024-28927, CVE-2024-29982, CVE-2024-29983, CVE-2024-29984, CVE-2024-29985, CVE-2024-28929, CVE-2024-28930, CVE-2024-28931, CVE-2024-28932, CVE-2024-28933, CVE-2024-28934, CVE-2024-28935, CVE-2024-28936, CVE-2024-28937, CVE-2024-28938, CVE-2024-28939, CVE-2024-28940, CVE-2024-28941, CVE-2024-28942, CVE-2024-28943, CVE-2024-28944, CVE-2024-28945, CVE-2024-29043, CVE-2024-29044, CVE-2024-29045, CVE-2024-29046, CVE-2024-29047, CVE-2024-29048
    • Microsoft SQL Server, ODBC and OLE DB Driver for SQL Server Multiple Vulnerabilities for October 2023
      • CVE-2023-36728, CVE-2023-36730, CVE-2023-36420, CVE-2023-36785, CVE-2023-36417
    • Microsoft SQL Server Remote Code Execution (RCE) Vulnerability for February 2023
      • CVE-2023-21713, CVE-2023-21528, CVE-2023-21568, CVE-2023-21718, CVE-2023-21705, CVE-2023-21704, CVE-2023-23384
    • Microsoft SQL Server Remote Code Execution (RCE) Vulnerability for June 2022
      • CVE-2022-29143
    • Microsoft SQL Server Elevation of Privilege Vulnerability - January 2021
      • CVE-2021-1636
This is a printer-friendly version of Article 408873 and may be out of date. For the latest version click CS408873