Vulnerability Intelligence

🛡 CVE-2020-0618

📈 EPSS exploit probability

⚠ KEV remediation overdue

CISA required federal remediation by 2024-10-09. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service a

🏹 Attributed exploitation

Malware / ransomware (KEV): ransomware (KEV-flagged)

🔗 External references & OSINT

🔄 Internal pivots & actions

🛡 Add to case

🗃 Data Management

🧩 Advanced Capabilities