{"id":"CVE-2020-1455","aliases":["EUVD-2020-12330","GHSA-6pcm-x8v9-rgxq"],"status":"published","title":"Microsoft SQL Server Management Studio Denial of Service Vulnerability","description":"A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service.\nTo exploit the vulnerability, an attacker would first require execution on the victim system.\nThe security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:H/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01228,"percentile":0.69119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-08-17T19:13:02Z","modified":"2026-06-17T03:01:27Z","products":[{"vendor":"microsoft","product":"sql server management studio 18.6"},{"vendor":"microsoft","product":"sql_server_management_studio"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1455","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1455"},{"url":"https://github.com/advisories/GHSA-6pcm-x8v9-rgxq"}],"sources":{"cve":[{"id":"CVE-2020-1455","title":"Microsoft SQL Server Management Studio Denial of Service Vulnerability","description":"A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service.\nTo exploit the vulnerability, an attacker would first require execution on the victim system.\nThe security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.","status":"published","published":"2020-08-17T19:13:02Z","modified":"2024-08-04T06:39:09.66Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:H/RL:O/RC:C","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:56.638833Z"}],"euvd":[{"id":"EUVD-2020-12330","description":"A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service.\nTo exploit the vulnerability, an attacker would first require execution on the victim system.\nThe security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.","status":"published","published":"2020-08-17T19:13:02Z","modified":"2024-08-04T06:39:09Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:H/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-03T03:08:13.874945Z"}],"ghsa":[{"id":"GHSA-6pcm-x8v9-rgxq","title":"A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS)...","description":"A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files, aka 'Microsoft SQL Server Management Studio Denial of Service Vulnerability'.","status":"published","published":"2022-05-24T17:25:46Z","modified":"2024-01-12T05:08:30Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:55:24.003446Z"}],"nvd":[{"id":"CVE-2020-1455","description":"A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service.\nTo exploit the vulnerability, an attacker would first require execution on the victim system.\nThe security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.","status":"published","published":"2020-08-17T19:15:14.74Z","modified":"2026-06-17T03:01:27.07Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:06:13.05572Z"}]}}