Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

概要

参考情報

• packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html · Exploit
• packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html · Exploit
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2020-0618

sql server のその他の脆弱性

• CVE-2024-0056高 8.7Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
• CVE-2023-36785高 7.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2023-36730高 7.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2023-36728中 5.5Microsoft SQL Server Denial of Service Vulnerability
• CVE-2023-36420高 7.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability