CVE-2020-1181

Опубликовано: 09 июн. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.

Ссылки

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181
Patch
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-694/
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181
Patch
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-694/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.5074

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2020-1181

msrc

больше 5 лет назад

Microsoft SharePoint Server Remote Code Execution Vulnerability

GHSA-7q25-89mc-hp7w

github

больше 3 лет назад

BDU:2020-03101