Description

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.

Remediation

References

CVE-2020-1069

Related Vulnerabilities

Moodle CVE-2018-1081 Vulnerability (CVE-2018-1081)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3433)

WordPress Plugin Blogger To WordPress SQL Injection (2.2.1)

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17298)

Oracle JRE CVE-2013-1569 Vulnerability (CVE-2013-1569)

Severity

High

Classification

CVE-2020-1069 CWE-476 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities