Lucene search

[email protected]CVE-2020-17120

HistoryDec 10, 2020 - 12:15 a.m.

CVE-2020-17120

2020-12-1000:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-17120

microsoft

sharepoint

information disclosure

vulnerability

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.0%

JSON

Microsoft SharePoint Information Disclosure Vulnerability

VendorProductVersionCPE
microsoftmicrosoft_sharepoint_enterprise_server_201616.0.0cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server_2016:16.0.0:*:*:*:*:*:*:*
microsoftmicrosoft_sharepoint_foundation_2013_sp115.0.0cpe:2.3:a:microsoft:microsoft_sharepoint_foundation_2013_sp1:15.0.0:sp1:*:*:*:*:*:*
microsoftmicrosoft_sharepoint_foundation_2010_sp213.0.0cpe:2.3:a:microsoft:microsoft_sharepoint_foundation_2010_sp2:13.0.0:sp2:*:*:*:*:*:*
microsoftmicrosoft_sharepoint_server_201916.0.0cpe:2.3:a:microsoft:microsoft_sharepoint_server_2019:16.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	microsoft_sharepoint_enterprise_server_2016	16.0.0	cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server_2016:16.0.0:::::::*
microsoft	microsoft_sharepoint_foundation_2013_sp1	15.0.0	cpe:2.3:a:microsoft:microsoft_sharepoint_foundation_2013_sp1:15.0.0:sp1::::::
microsoft	microsoft_sharepoint_foundation_2010_sp2	13.0.0	cpe:2.3:a:microsoft:microsoft_sharepoint_foundation_2010_sp2:13.0.0:sp2::::::
microsoft	microsoft_sharepoint_server_2019	16.0.0	cpe:2.3:a:microsoft:microsoft_sharepoint_server_2019:16.0.0:::::::*