VULNERABILITY INTELLIGENCE

CVE-2020-1439

CVSS score8.8 HIGH

EPSS probability20.27%

CISA KEVNot currently listed

Published2020-07-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.

Weakness classification

nvd@nist.gov: CWE-502

Primary references

secure@microsoft.com — Patch, Vendor Advisory
secure@microsoft.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory