CVE-2020-0618

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

Affected

Microsoft · Microsoft SQL Server · Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) · Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) · Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) · Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR) · Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

99.05% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2024-09-18, used in ransomware campaigns

Nuclei

high · CWE-502

Published

2020-02-11

Updated

2026-08-15

Proof-of-concept exploits (4)

• http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-…
• http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-…
• euphrat1ca/CVE-2020-0618194★ · 2020-02-15
• wortell/cve-2020-061830★ · 2020-03-03

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-0618.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ssrs_navcorrector_v…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48816

Security advisories

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618

References

• CVE Record
• NVD entry

Related

• CVE-2021-44228