CVE-2020-0618 Microsoft SQL Server
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.
- CVSS
- not scored
On CISA’s exploited list
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
- Added
- 2024-09-18
- Federal patch deadline
- 2024-10-09
- Ransomware use
- known