CVE-2020-17015 Microsoft SharePoint Server Spoofing Vulnerability

🗓️ 11 Nov 2020 06:48:04Reported by microsoftType

Microsoft SharePoint Server Spoofing Vulnerabilit

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing an attacker to gain access to modify data.	24 Nov 202000:00	–	bdu_fstec
CNVD	Microsoft SharePoint Spoofing Vulnerability (CNVD-2020-63715)	13 Nov 202000:00	–	cnvd
CVE	CVE-2020-17015	11 Nov 202006:48	–	cve
EUVD	EUVD-2020-8972	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for SharePoint Server 2019: November 10, 2020	10 Nov 202008:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: November 10, 2020	10 Nov 202008:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: November 10, 2020	10 Nov 202008:00	–	mskb
Kaspersky	KLA12002 Multiple vulnerabilities in Microsoft Office	10 Nov 202000:00	–	kaspersky
Microsoft CVE	Microsoft SharePoint Server Spoofing Vulnerability	10 Nov 202008:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Office products	10 Nov 202000:00	–	ncsc

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Foundation 2013 Service Pack 1",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17015

10 Sep 2024 15:51Current

5Medium risk

Vulners AI Score5

CVSS 3.14.3

EPSS0.02737