SQL Server vulnerability assessment