CVE-2020-1102 — Microsoft Sharepoint Enterprise Server vulnerability

6 documents5 sources
Severity
8.8HIGHNVD
EPSS
46.2%
top 2.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint ServerMicrosoft Sharepoint Enterprise Server+1 more
Timeline
PublishedMay 21
Latest updateMay 24

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1024.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-xq28-w75v-29rr: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka↗2022-05-24
▶
CVEList
CVE-2020-1102: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka↗2020-05-21
▶

📋Vendor Advisories

1
Microsoft
Microsoft SharePoint Remote Code Execution Vulnerability↗2020-05-12
▶

🕵️Threat Intelligence

2
Talos
Vulnerability Spotlight: Denial of service in AMD ATIKMDAG.SYS driver↗2020-10-13
▶
Talos
Vulnerability Spotlight: Denial of service in AMD ATIKMDAG.SYS driver↗2020-10-13
▶
CVE-2020-1102 — Microsoft vulnerability | cvebase