CVEvulnerability
CVE-2020-1181
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Description
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Affected configurations
• microsoft sharepoint enterprise server 2016
• microsoft sharepoint foundation 2010
• microsoft sharepoint foundation 2013
• microsoft sharepoint server 2019
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181 Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-694/ Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181 Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-694/ Third Party Advisory, VDB Entry