CVE-2020-0891

🗓️ 12 Mar 2020 15:48:54Reported by microsoftType

SharePoint Server Reflective XSS Vulnerability

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	18 Mar 202000:00	–	bdu_fstec
Circl	CVE-2020-0891	28 Feb 202520:27	–	circl
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-18392)	11 Mar 202000:00	–	cnvd
CVE	CVE-2020-0891	12 Mar 202015:48	–	cve
EUVD	EUVD-2020-2359	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for SharePoint Foundation 2010: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: March 10, 2020	10 Mar 202007:00	–	mskb
Kaspersky	KLA11687 Multiple vulnerabilities in Microsoft Office	10 Mar 202000:00	–	kaspersky

[
  {
    "product": "Microsoft SharePoint Enterprise Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2019"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Foundation",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0891

12 Mar 2020 15:48Current

5.4Medium risk

Vulners AI Score5.4

EPSS0.00622