CVE-2020-0971

EPSS 13.2%

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 13.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 abr 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0974.

Produtos afetados

Microsoft · Microsoft SharePoint Enterprise Server Microsoft · Microsoft SharePoint Foundation Microsoft · Microsoft SharePoint Server

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0971 https://www.zerodayinitiative.com/advisories/ZDI-20-1398/