CVE-2020-0795

🗓️ 12 Mar 2020 15:48:18Reported by microsoftType

SharePoint Server vulnerability in request sanitizatio

Reporter	Title	Published	Views	Family All 23
BDU FSTEC	The vulnerability of Microsoft Business Productivity Servers, SharePoint Enterprise Server, and SharePoint Foundation lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	25 Mar 202000:00	–	bdu_fstec
Circl	CVE-2020-0795	28 Feb 202520:27	–	circl
CNVD	Microsoft SharePoint Reflective Cross-Site Scripting Vulnerability	13 Mar 202000:00	–	cnvd
CVE	CVE-2020-0795	12 Mar 202015:48	–	cve
EUVD	EUVD-2020-2282	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for SharePoint Server 2010: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: March 10, 2020	10 Mar 202007:00	–	mskb
Kaspersky	KLA11687 Multiple vulnerabilities in Microsoft Office	10 Mar 202000:00	–	kaspersky
Microsoft CVE	Microsoft SharePoint Reflective XSS Vulnerability	10 Mar 202007:00	–	mscve

[
  {
    "product": "Microsoft SharePoint Enterprise Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016"
      }
    ]
  },
  {
    "product": "Microsoft Business Productivity Servers",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Foundation",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0795

12 Mar 2020 15:48Current

5.4Medium risk

Vulners AI Score5.4

EPSS0.00469