Threat intelligence / Vulnerability
CVE-2020-0618
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.
Vulnerability
TypeVulnerability
External ID—
First seen2024-09-18
Last seen2024-09-18
Confidence
—
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.
Labels
CISA KEV context
Vendor / productMicrosoft SQL Server
Added2024-09-18
Due date2024-10-09
2 recorded
Relationships
2 external