Description of the security update for SharePoint Foundation 2013: May 12, 2020

🗓️ 12 May 2020 07:00:00Reported by MicrosoftType

Security update for SharePoint Foundation 2013 resolves vulnerabilities in Microsoft Office, including remote code execution risk. It also fixes FedAuth cookie deletion issue

Reporter	Title	Published	Views	Family All 113
Information Security Automation	Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio	13 May 202000:49	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.	26 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their improper handling of queries, allowing attackers to gain unauthorized access to protected information.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint software package, related to the unlimited loading of dangerous type files, allows a hacker to execute arbitrary code.	17 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute arbitrary code.	17 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	26 Jun 202000:00	–	bdu_fstec

12 May 2020 07:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.5

CVSS 3.15.4 - 8.8

EPSS0.10413

SSVC