{"revision":"d99f4bca315b448387354ca7c2d9afcd","evidence":{"cve":"CVE-2020-0618","kev":{"cve":"CVE-2020-0618","product":"SQL Server","name":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","knownRansomwareUse":true,"shortDescription":"Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.","vendor":"Microsoft","isMicrosoft":true,"products":[],"advisoryUrl":null,"publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0618","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0618"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"bdbfd61ae6da518f1ab8a8ba"}}