PoC Index

CVE-2020-0618

KEV RANSOMWARECRITICAL 9.8EPSS 99.0%

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

CVSS v3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
99.02% chance of exploitation in the next 30 days, 100th percentile
CISA KEV
added 2024-09-18, used in ransomware campaigns
Nuclei
high · CWE-502
Published
2020-02-11
Updated
2026-08-15

Proof-of-concept exploits (5)

Nuclei templates (1)

Metasploit modules (1)

ExploitDB entries (1)

References

Related