Description

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.

Remediation

References

CVE-2020-1069

Related Vulnerabilities

TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21911)

PHP Incorrect Calculation of Buffer Size Vulnerability (CVE-2025-1861)

WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA Cross-Site Request Forgery (0.3.2)

SharePoint Out-of-bounds Read Vulnerability (CVE-2026-45485)

MySQL CVE-2017-3450 Vulnerability (CVE-2017-3450)

Severity

High

Classification

CVE-2020-1069 CWE-476 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities