CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-11
Microsoft SQL Server Reporting Services (SSRS) ViewState Deserialization Remote Code Execution Vulnerability (CVE-2020-0618) Analysis and Mitigation Guide
[Affected Scope] Microsoft SQL Server Reporting Services (SSRS) 2012, 2014, and 2016
[Impact] An authenticated attacker can execute arbitrary remote code under the context of the SSRS service account by sending a crafted HTTP POST request
[Mitigation] Immediately apply the official Microsoft security patches and restrict network access to the SSRS web portal