Dashboard / CVE-2020-0618

CVE-2020-0618

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — SQL Server
Date Added 2024-09-18
Remediation Due 2024-10-09
Ransomware Use CONFIRMED
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0618 ; https://nvd.nist.gov/vuln/detail/CVE-2020-0618

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
microsoft sql_server 2012
microsoft sql_server 2014
microsoft sql_server 2016

References & Advisories (4)

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links