Ensure Latest SQL Server Cumulative and Security Updates are Installed

高级别 1人工审核mssql

说明

SQL Server patches contain program updates that fix security and product functionality issues found in the software. These patches can be installed with a security update, which is a single patch, or a cumulative update which is a group of patches. The SQL Server version and patch levels should be the most recent compatible with the organizations' operational needs. Default: Cumulative and security updates are not installed by default.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

To determine your SQL Server patch level, run the following code snippet. SELECT SERVERPROPERTY('ProductLevel') as SP_installed, SERVERPROPERTY('ProductVersion') as Version, SERVERPROPERTY('ProductUpdateLevel') as 'ProductUpdate_Level', SERVERPROPERTY('ProductUpdateReference') as 'KB_Number';

修复方式

修复方法: 操作指南或基础设施补丁

Identify the current version and patch level of your SQL Server instances and ensure they contain the latest security fixes. Make sure to test these fixes in your test environments before updating production instances. The most recent SQL Server patches can be found here: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest- updates

属性

操作系统: 任意
标签: mssqldatabasemanual
参考: CIS Microsoft SQL Server 2025 Benchmark v1.0.0 - 1.1 Ensure Latest SQL Server Cumulative and Security Updates are Installed