EUVD-2020-11938

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Security flaw in SQL Server Reporting Services allows unauthorized file upload via invalidated attachments.

Reporter	Title	Published	Views	Family All 13
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of the SQL Server Reporting Services reporting system’s server-side components, related to errors in processing input data, allows attackers to upload files with invalid types.	29 Sep 202000:00	–	bdu_fstec
CNVD	Microsoft SQL Server Reporting Services Security Feature Bypass Vulnerability	28 Oct 202000:00	–	cnvd
CVE	CVE-2020-1044	11 Sep 202017:08	–	cve
Cvelist	CVE-2020-1044 SQL Server Reporting Services Security Feature Bypass Vulnerability	11 Sep 202017:08	–	cvelist
Kaspersky	KLA11958 SB vulnerability in Microsoft SQL Server	8 Sep 202000:00	–	kaspersky
Microsoft CVE	SQL Server Reporting Services Security Feature Bypass Vulnerability	8 Sep 202007:00	–	mscve
NCSC	Vulnerability fixed in Microsoft SQL Server Reporting Services	8 Sep 202000:00	–	ncsc
NVD	CVE-2020-1044	11 Sep 202017:15	–	nvd
OSV	CVE-2020-1044	11 Sep 202017:15	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "3d96a521-d6d1-332c-b86f-044b43c9e724",
        "vendor": {
          "name": "Microsoft"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1a0c2c75-ab70-3055-9975-8fb4e3ef2817",
        "product": {
          "name": "SQL Server 2017 Reporting Services"
        },
        "product_version": "14.0.0 <publication"
      },
      {
        "id": "49cd0d44-ea5f-33fe-b12d-38b22f23944c",
        "product": {
          "name": "SQL Server 2019 Reporting Services"
        },
        "product_version": "15.0.0 <publication"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1044
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.3 - 6.5

CVSS 24

EPSS0.01907