Description of the security update for SharePoint Enterprise Server 2016: July 14, 2020

🗓️ 14 Jul 2020 07:00:00Reported by MicrosoftType

Security update for SharePoint Enterprise Server 2016: Resolves remote code execution vulnerabilities, adds Feature Packs 1 & 2, delivers improvements in translations and regional settings

Reporter	Title	Published	Views	Family All 89
Information Security Automation	Microsoft Patch Tuesday July 2020: my new open source project Vulristics, DNS SIGRed, RDP Client and SharePoint	2 Aug 202004:05	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.	24 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.	24 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of PerformancePoint Services in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.	29 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing attackers to execute arbitrary code.	29 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing an intruder to gain unauthorized access to protected information.	29 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.	31 Jul 202000:00	–	bdu_fstec
CNVD	Microsoft PerformancePoint Services Remote Code Execution Vulnerability	30 Jul 202000:00	–	cnvd
CNVD	Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11034)	12 Aug 202000:00	–	cnvd
CNVD	Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11035)	4 Aug 202000:00	–	cnvd

14 Jul 2020 07:00Current

8.1High risk

Vulners AI Score8.1

CVSS 26.8

CVSS 3.18.8

EPSS0.20265