Sql Server Reporting Services

Vendor:

First CVE: Sep 11, 2008 · Active for 17 years

14

Total CVEs

More Total CVEs than 91% of tracked products

3.5

Avg CVEs / Year

Higher CVE frequency than 82% of tracked products

8.7

Avg CVSS

Higher Avg CVSS than 78% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Sql Server Reporting Services over time

Volume of CVEsAvg CVSS Base Score

First CVE

Sep 11, 2008

17 years ago

Most Recent CVE

Sep 11, 2020

2,143 days ago

CVE Severity & Scoring

Sql Server Reporting Services14 CVEs

14%

86%

All CVEs352,427 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network2 (14.3%)

Unknown12 (85.7%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (7.1%)

High1 (7.1%)

Unknown12 (85.7%)

User Interaction

None2 (14.3%)

Unknown12 (85.7%)

Required0 (0.0%)

Privileges Required

Low1 (7.1%)

High0 (0.0%)

None1 (7.1%)

Unknown12 (85.7%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-3013HIGH gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3,	Sep 11, 2008	9.3	62	NO	YES
CVE-2007-5348HIGH Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and	Sep 11, 2008	9.3	62	NO	YES
CVE-2008-3015HIGH Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Work	Sep 11, 2008	9.3	44	NO	NO
CVE-2008-3014HIGH Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office	Sep 11, 2008	9.3	41	NO	NO
CVE-2008-3012HIGH gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3,	Sep 11, 2008	9.3	41	NO	NO
CVE-2009-3126HIGH Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002	Oct 14, 2009	9.3	35	NO	NO
CVE-2009-2501HIGH Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Pr	Oct 14, 2009	9.3	35	NO	NO
CVE-2009-2528HIGH GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Offi	Oct 14, 2009	9.3	34	NO	NO
CVE-2009-2500HIGH Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002	Oct 14, 2009	9.3	34	NO	NO
CVE-2009-2503HIGH GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project	Oct 14, 2009	9.3	33	NO	NO

View all 14 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

2 CVEs

14.3% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Sql Server Reporting Services

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
2019	1	6.5	1.9%	0
2017	1	6.5	1.9%	0
2000	13	8.8	29.8%	2