CVE-2020-1455

Microsoft SQL Server Management Studio Denial of Service Vulnerability

Medium · published August 17, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service.

To exploit the vulnerability, an attacker would first require execution on the victim system.

The security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:H/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01228 · 68.7th percentile
Published
2020-08-17T19:13Z
EPSS history
Timeline
  • 17 AUG 19:13Z
    Microsoft SQL Server Management Studio Denial of Service Vulnerability
    cvelistv5