Databases Are Vulnerable

To date, there are hundreds of known vulnerabilities in DBMSs across different vendors and versions. So why aren't patches deployed?

Patching Databases Is a Difficult Task

Databases are complex applications. This complexity makes them particularly susceptible to many security vulnerabilities that provide an entry point for intruders and unauthorized users.

Exploits published on the Web enable unskilled users to hack into the database and own it by using privilege escalation, and attack vectors such as SQL injection and buffer overflow

Severe vulnerabilities even allow remote access by unauthenticated users, for example, those who are on remote IP addresses and have no database login credentials at all. With so many known risks for DBMSs across so many vendors and versions, it seems unthinkable that databases would be left unpatched. But they are.