CVE-2020-1181
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - secure@microsoft.com
- Published
- 2020-06-09
- Last modified
- 2024-08-04
Affected products
- Microsoft Sharepoint Enterprise Server (Microsoft)
- Microsoft Sharepoint Foundation (Microsoft)
- Microsoft Sharepoint Server (Microsoft)
- Sharepoint Enterprise Server (Microsoft)
- Sharepoint Foundation (Microsoft)
- Sharepoint Server (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181
- https://www.zerodayinitiative.com/advisories/ZDI-20-694/
