CVE-2020-0932 — Microsoft Sharepoint Enterprise Server vulnerability

5 documents5 sources
Severity
8.8HIGHNVD
EPSS
29.2%
top 3.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server+3 more
Timeline
PublishedApr 15
Latest updateJul 22

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0971, CVE-2020-0974.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5microsoft/microsoft_sharepoint_foundation2013 Service Pack 1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f3pr-7rjp-hqhv: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka↗2022-05-24
▶
CVEList
CVE-2020-0932: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka↗2020-04-15
▶

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS Microsoft Sharepoint Authenticated WebParts TypeConverter Remote Code Execution (CVE-2020-0932)↗2025-07-22
▶

📋Vendor Advisories

1
Microsoft
Microsoft SharePoint Remote Code Execution Vulnerability↗2020-04-14
▶
CVE-2020-0932 — Microsoft vulnerability | cvebase