Cyber Resilience

CVE-2020-1181

Microsoft Sharepoint Foundation 2010 … 2013

High EPSS
Published
09 June 2020
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.69 99.3th percentile
Risk Priority 89 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2020-1181 is a high-severity an unspecified weakness vulnerability in Microsoft Sharepoint Foundation. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 0.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2022-35823Same product: Microsoft Sharepoint Enterprise Server
CVE-2022-38053Same product: Microsoft Sharepoint Enterprise Server
CVE-2022-37961Same product: Microsoft Sharepoint Enterprise Server
CVE-2019-0604Same product: Microsoft Sharepoint Enterprise Server
CVE-2023-21717Same product: Microsoft Sharepoint Enterprise Server
CVE-2020-16952Same product: Microsoft Sharepoint Enterprise Server
CVE-2022-44690Same product: Microsoft Sharepoint Foundation
CVE-2023-21742Same product: Microsoft Sharepoint Foundation
CVE-2023-28288Same product: Microsoft Sharepoint Foundation
CVE-2023-23395Same product: Microsoft Sharepoint Foundation

Affected Assets

microsoft
sharepoint enterprise server
2016
microsoft
sharepoint foundation
2010, 2013
microsoft
sharepoint server
2019

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References