STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

Microsoft SQL Server products must be a version supported by the vendor.

DISA Rule

SV-271365r1138543_rule

Vulnerability Number

V-271365

Group Title

SRG-APP-000456-DB-000400

Rule Version

SQLI-22-018300

Severity

CAT I

CCI(s)

• CCI-003376 - Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer.

Weight

10

Fix Recommendation

Remove or decommission all unsupported software products.

Upgrade unsupported DBMS or unsupported components to a supported version of the product.

Check Contents

Review the system documentation and interview the database administrator.

Identify all database software components.

Review the version and release information.

Verify the SQL Server version via one of the following methods:

Connect to the server by using Object Explorer in SQL Server Management Studio. After Object Explorer is connected, it will show the version information in parentheses with the username used to connect to the specific instance of SQL Server.

Or, from SQL Server Management Studio execute the following:
SELECT @@VERSION;

More information for finding the version is available at the following link: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/find-my-sql-version.

Access the vendor website or use other means to verify the version is still supported. Refer to https://learn.microsoft.com/en-us/lifecycle/products/sql-server-2016.

If the installed version or any of the software components are not supported by the vendor, this is a finding.

Vulnerability Number

V-271365

Documentable

False

Rule Version

SQLI-22-018300

Severity Override Guidance

Review the system documentation and interview the database administrator.

Identify all database software components.

Review the version and release information.

Verify the SQL Server version via one of the following methods:

Connect to the server by using Object Explorer in SQL Server Management Studio. After Object Explorer is connected, it will show the version information in parentheses with the username used to connect to the specific instance of SQL Server.

Or, from SQL Server Management Studio execute the following:
SELECT @@VERSION;

More information for finding the version is available at the following link: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/find-my-sql-version.

Access the vendor website or use other means to verify the version is still supported. Refer to https://learn.microsoft.com/en-us/lifecycle/products/sql-server-2016.

If the installed version or any of the software components are not supported by the vendor, this is a finding.

Check Content Reference

M

Target Key

5677