VULNERABILITY INTELLIGENCE

CVE-2020-1255

CVSS score8.8 HIGH
EPSS probability3.37%
CISA KEVNot currently listed
Published2020-06-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references