Lucene search

[email protected]CVE-2020-1444

HistoryJul 14, 2020 - 11:15 p.m.

CVE-2020-1444

2020-07-1423:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-1444

microsoft

sharepoint

rce

vulnerability

email parsing

nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

7.2 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.009 Low

EPSS

Percentile

82.1%

JSON

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka ‘Microsoft SharePoint Remote Code Execution Vulnerability’.

VendorProductVersionCPE
microsoftsharepoint_server2016cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*
microsoftsharepoint_server2019cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
microsoftsharepoint_foundation2010cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	sharepoint_server	2016	cpe:2.3:a:microsoft:sharepoint_server:2016:::::::*
microsoft	sharepoint_server	2019	cpe:2.3:a:microsoft:sharepoint_server:2019:::::::*
microsoft	sharepoint_foundation	2010	cpe:2.3:a:microsoft:sharepoint_foundation:2010:::::::*