VULNERABILITY INTELLIGENCE

CVE-2020-1181

CVSS score8.8 HIGH

EPSS probability69.30%

CISA KEVNot currently listed

Published2020-06-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

secure@microsoft.com — Patch, Vendor Advisory
secure@microsoft.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry