Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-0618
HistoryFeb 11, 2020 - 10:15 p.m.

CVE-2020-0618

2020-02-1122:15:00
CWE-502
[email protected]
web.nvd.nist.gov
1133
5
cve-2020-0618
microsoft
sql server
reporting services
remote code execution
vulnerability
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.974 High

EPSS

Percentile

99.9%

JSON

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka ‘Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability’.

VendorProductVersionCPE
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:service pack 3:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:service pack 3:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:service pack 2:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:service pack 3:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:service pack 3:*:*:*:*:*:*

Social References

More

Related

packetstorm 2
saint 3
mskb 5
zdt 2
prion 1
attackerkb 1
mscve 1
kaspersky 1
nessus 2
nuclei 1
checkpoint_advisories 1
canvas 1
metasploit 1
exploitdb 1
krebs 1
threatpost 1
talosblog 1
packetstorm
packetstorm
SQL Server Reporting Services (SSRS) ViewState Deserialization
2020-03-12 00:00:00
Microsoft SQL Server Reporting Services 2016 Remote Code Execution
2020-09-17 00:00:00
saint
saint
Microsoft SQL Server Reporting Services 2016 ViewState deserialization vulnerability
2020-09-25 00:00:00
Microsoft SQL Server Reporting Services 2016 ViewState deserialization vulnerability
2020-09-25 00:00:00
Microsoft SQL Server Reporting Services 2016 ViewState deserialization vulnerability
2020-09-25 00:00:00
mskb
mskb
KB4532098 - Description of the security update for SQL Server 2012 SP4 GDR: February 11, 2020
2020-02-11 08:00:00
KB4532095 - Description of the security update for SQL Server 2014 SP3 GDR: February 11, 2020
2020-02-11 08:00:00
KB4535288 - Description of the security update for SQL Server 2014 SP3 CU4: February 11, 2020
2020-02-11 08:00:00
zdt
zdt
Microsoft SQL Server Reporting Services 2016 - Remote Code Execution Exploit
2020-09-17 00:00:00
SQL Server Reporting Services (SSRS) ViewState Deserialization Exploit
2020-03-12 00:00:00
prion
prion
Remote code execution
2020-02-11 22:15:00
attackerkb
attackerkb
CVE-2020-0618
2020-02-11 00:00:00
mscve
mscve
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
2020-02-11 08:00:00
kaspersky
kaspersky
KLA11661 ACE vulnerability in Microsoft SQL Server
2020-02-11 00:00:00
nessus
nessus
Security Updates for Microsoft SQL Server (February 2020)
2020-02-14 00:00:00
Security Updates for Microsoft SQL Server (Uncredentialed Check) (February 2020)
2020-02-14 00:00:00
nuclei
nuclei
Microsoft SQL Server Reporting Services - Remote Code Execution
2020-09-28 01:52:37
checkpoint_advisories
checkpoint_advisories
Microsoft SQL Server Remote Code Execution (CVE-2020-0618)
2020-03-17 00:00:00
canvas
canvas
Immunity Canvas: SSRS_VIEWSTATE_RCE
2020-02-11 22:15:00
metasploit
metasploit
SQL Server Reporting Services (SSRS) ViewState Deserialization
2020-03-06 21:21:37
exploitdb
exploitdb
Microsoft SQL Server Reporting Services 2016 - Remote Code Execution
2020-09-17 00:00:00
krebs
krebs
Microsoft Patch Tuesday, February 2020 Edition
2020-02-11 23:13:57
threatpost
threatpost
Microsoft Addresses Active Attacks, Air-Gap Danger with 99 Patches
2020-02-11 22:06:57
talosblog
talosblog
Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage
2020-02-13 08:22:46

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2020-0618
packetstorm2saint3mskb5zdt2prion1attackerkb1mscve1kaspersky1nessus2nuclei1checkpoint_advisories1canvas1metasploit1exploitdb1krebs1threatpost1talosblog1