CVE-2020-0618

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score59.8780%

EPSS Percentile88.12th

Published2020年2月11日

Last Modified2026年1月13日

Vulnerability Description

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

Affected Platforms (CPE)

📦

Microsoft

Sql Server

= 2012

📦

Microsoft

Sql Server

= 2014

📦

Microsoft

Sql Server

= 2016

References & Advisories

🔗 http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html

🔗 http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618

🔗 http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html

🔗 http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0618

Vulnerability Description

Affected Platforms (CPE)

Sql Server

Sql Server

Sql Server

References & Advisories

関連する脆弱性情報