Description of the security update for SharePoint Server Enterprise 2016: May 12, 2020

🗓️ 12 May 2020 07:00:00Reported by MicrosoftType

Security update for SharePoint Server Enterprise 2016: May 12, 2020 resolves remote code execution vulnerabilities. Requires Microsoft SharePoint Enterprise Server 2016. Delivers Feature Pack 2 with improvements and fixes

Reporter	Title	Published	Views	Family All 145
Information Security Automation	Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio	13 May 202000:49	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.	26 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	26 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their improper handling of queries, allowing attackers to gain unauthorized access to protected information.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint software package, related to the unlimited loading of dangerous type files, allows a hacker to execute arbitrary code.	17 Jun 202000:00	–	bdu_fstec

12 May 2020 07:00Current

7.3High risk

Vulners AI Score7.3

CVSS 26.5

CVSS 3.15.4 - 8.8

EPSS0.15134

SSVC