SQL Server
Security incidents tagged SQL Server. Newest first.
0 SQL Server incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 764
- Longest quiet run: 764 days (Sep 19–Oct 22)
Show 1 older incident1 older incident
September 2024 1
CriticalMicrosoft SQL Server Reporting Services Remote Code ExecutionPatched
Microsoft SQL Server Patched
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account. Added to the CISA KEV catalog on 2024-09-18. CISA lists known use in ransomware campaigns. CVE-2020-0618 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2020-0618
