CVE-2020-1181
published 2020-06-09CVE-2020-1181: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka…
PriorityP270high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
69.30%
99.3th percentile
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft_sharepoint_enterprise_server | — | — |
| microsoft | microsoft_sharepoint_foundation | — | — |
| microsoft | microsoft_sharepoint_foundation | — | — |
| microsoft | microsoft_sharepoint_server | — | — |
| microsoft | sharepoint_enterprise_server | — | — |
| microsoft | sharepoint_foundation | — | — |
| microsoft | sharepoint_foundation | — | — |
| microsoft | sharepoint_server | — | — |
| msrc | microsoft_sharepoint_enterprise_server_2016 | — | — |
| msrc | microsoft_sharepoint_foundation_2010_service_pack_2 | — | — |
| msrc | microsoft_sharepoint_foundation_2013_service_pack_1 | — | — |
| msrc | microsoft_sharepoint_server_2019 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →The vulnerability is exploited by an authenticated user creating and invoking a specially crafted page on an affected Microsoft SharePoint Server, abusing unsafe ASP.Net web controls to execute code in the SharePoint application pool process context. ↗
- →The attack vector is a crafted SharePoint page (not the Preview Pane), so detection should focus on unusual page creation and invocation events by authenticated users on SharePoint servers. ↗
- →The Preview Pane is confirmed NOT an attack vector; focus monitoring on direct page creation/invocation rather than preview-based activity. ↗
- ·Exploitation requires authentication; unauthenticated access attempts would not trigger this vulnerability. Prioritize monitoring authenticated SharePoint user activity. ↗
- ·Microsoft assessed exploitation as less likely for both latest and older software releases; however, all SharePoint servers should still be prioritized for patching. ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_msrc8.8CRITICAL
vendor_oracle8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7q25-89mc-hp7w: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP
ghsa_unreviewed·2022-05-24
CVE-2020-1181 [MEDIUM] CWE-20 GHSA-7q25-89mc-hp7w: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Oracle
Oracle Oracle Communications Applications Risk Matrix: MSS Integration Cartridge (Apache Struts 1) — CVE-2016-1181
vendor_oracle·2020-07-15·CVSS 8.1
CVE-2016-1181 [HIGH] Oracle Oracle Communications Applications Risk Matrix: MSS Integration Cartridge (Apache Struts 1) — CVE-2016-1181
Oracle Oracle Communications Applications Risk Matrix: MSS Integration Cartridge (Apache Struts 1) vulnerability
CVE: CVE-2016-1181
CVSS: 8.1
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2020 (JUL 2020)
Microsoft
Microsoft SharePoint Server Remote Code Execution Vulnerability
vendor_msrc·2020-06-09·CVSS 8.8
CVE-2020-1181 [HIGH] Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in the security context of the SharePoint application pool process.
To exploit the vulnerability, an authenticated user must create and invoke a specially crafted page on an affected version of Microsoft SharePoint Server.
The security update addresses the vulnerability by correcting how Microsoft SharePoint Server handles processing of created content.
FAQ: Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is
Oracle
Oracle Oracle Retail Applications Risk Matrix: Dataset Component (Struts1) — CVE-2016-1181
vendor_oracle·2020-01-15·CVSS 8.1
CVE-2016-1181 [HIGH] Oracle Oracle Retail Applications Risk Matrix: Dataset Component (Struts1) — CVE-2016-1181
Oracle Oracle Retail Applications Risk Matrix: Dataset Component (Struts1) vulnerability
CVE: CVE-2016-1181
CVSS: 8.1
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2020 (JAN 2020)
No detection rules found.
No public exploits indexed.
Trendmicro
Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
blogs_trendmicro·2020-06-10·CVSS 8.8
[HIGH] Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
Exploits & Vulnerabilities
## Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
By: Trend Micro 2020/06/10 Read time: ( words)
Save to Folio
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
While the update contained a significant number of patches, only 11 were rated Critical. One of the patches addresses yet another LNK-related vulnerability, CVE-2020-1299 , which att
Trendmicro
Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
blogs_trendmicro·2020-06-10·CVSS 8.8
[HIGH] Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
Sfruttamento vulnerabilità
## Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
By: Trend Micro Jun 10, 2020 Read time: ( words)
Save to Folio
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
While the update contained a significant number of patches, only 11 were rated Critical. One of the patches addresses yet another LNK-related vulnerability, CVE-2020-1299 , which a
Trendmicro
Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
blogs_trendmicro·2020-06-10·CVSS 8.8
[HIGH] Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
Exploits & Vulnerabilities
## Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
By: Trend Micro Jun 10, 2020 Read time: ( words)
Save to Folio
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
While the update contained a significant number of patches, only 11 were rated Critical. One of the patches addresses yet another LNK-related vulnerability, CVE-2020-1299 , which a
Trendmicro
Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
blogs_trendmicro·2020-06-10·CVSS 8.8
[HIGH] Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
Exploits & Vulnerabilities
# Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
By: Trend Micro
2020/06/10
Read time: ( words)
Save to Folio
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
While the update contained a significant number of patches, only 11 were rated Critical. One of the patches addresses yet another LNK-related vulnerability, CVE-2020-1299, which atta
Trendmicro
Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
blogs_trendmicro·2020-06-10·CVSS 8.8
[HIGH] Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
Exploits y vulnerabilidades
## Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
By: Trend Micro Jun 10, 2020 Read time: ( words)
Save to Folio
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
While the update contained a significant number of patches, only 11 were rated Critical. One of the patches addresses yet another LNK-related vulnerability, CVE-2020-1299 , which
Trendmicro
Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
blogs_trendmicro·2020-06-10·CVSS 8.8
[HIGH] Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
Ausnutzung von Schwachstellen
## Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
By: Trend Micro Jun 10, 2020 Read time: ( words)
Save to Folio
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation of the trend seen from the previous months. The update includes fixes for LNK, SMB, SharePoint, and Win32k vulnerabilities.
While the update contained a significant number of patches, only 11 were rated Critical. One of the patches addresses yet another LNK-related vulnerability, CVE-2020-1299 , whic
Qualys
June 2020 Patch Tuesday – 128 Vulns, 11 Critical, Sharepoint, Workstation, Adobe Patches | Qualys
blogs_qualys·2020-06-09·CVSS 8.8
CVE-2020-1299 [HIGH] June 2020 Patch Tuesday – 128 Vulns, 11 Critical, Sharepoint, Workstation, Adobe Patches | Qualys
This month’s Microsoft Patch Tuesday addresses 128 vulnerabilities with 11 of them labeled as Critical. The 11 Critical vulnerabilities cover SharePoint server, Browsers, Scripting Engines, Windows, GDI+, OLE and LNK files. Adobe issued patches today for Experience Manager, Flash Player and Framemaker.
### Workstation Patches
The Browser, Scripting Engine, LNK files (CVE-2020-1299), GDI+(CVE-2020-1248) and OLE (CVE-2020-1281) should be prioritized for workstation-type devices, meaning any system that is used for email or to access the internet via a browser. This includes multi-user servers that are used as remote desktops for users.
### SharePoint
A remote code execution vulnerability (CVE-2020-1181) is patched in Sharepoint Server that would allow an authenticated user on a guest sys
Tenable
Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)
blogs_tenable·2020-06-09·CVSS 7.5
[HIGH] Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Qualys
June 2020 Patch Tuesday – 128 Vulns, 11 Critical, Sharepoint, Workstation, Adobe Patches
blogs_qualys·2020-06-09·CVSS 8.8
CVE-2020-1299 [HIGH] June 2020 Patch Tuesday – 128 Vulns, 11 Critical, Sharepoint, Workstation, Adobe Patches
This month’s Microsoft Patch Tuesday addresses 128 vulnerabilities with 11 of them labeled as Critical. The 11 Critical vulnerabilities cover SharePoint server, Browsers, Scripting Engines, Windows, GDI+, OLE and LNK files. Adobe issued patches today for Experience Manager, Flash Player and Framemaker.
## Workstation Patches
The Browser, Scripting Engine, LNK files ( CVE-2020-1299 ), GDI+( CVE-2020-1248 ) and OLE ( CVE-2020-1281 ) should be prioritized for workstation-type devices, meaning any system that is used for email or to access the internet via a browser. This includes multi-user servers that are used as remote desktops for users.
## SharePoint
A remote code execution vulnerability ( CVE-2020-1181 ) is patched in Sharepoint Server that would allow an authenticated user on a gue
2020-06-09
Published