Description of the security update for SharePoint Foundation 2013: August 11, 2020

🗓️ 11 Aug 2020 07:00:00Reported by MicrosoftType

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To apply this security update, you must have the release version of Service Pack 1 for Microsoft SharePoint Foundation 2013 installed on the computer

Reporter	Title	Published	Views	Family All 64
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Enterprise Server, and Microsoft SharePoint Foundation software for electronic document management exists due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to execute cross-site scripting attacks.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server packages arises from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.	9 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for administrative data, which allows attackers to disclose protected information.	9 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spear-phishing attacks.	9 Sep 202000:00	–	bdu_fstec
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-49006)	27 Aug 202000:00	–	cnvd
CNVD	Microsoft SharePoint Input Validation Error Vulnerability (CNVD-2020-49027)	17 Aug 202000:00	–	cnvd
CNVD	Microsoft SharePoint Spoofing Vulnerability (CNVD-2020-64002)	27 Aug 202000:00	–	cnvd
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (NVD-C-2020-180981)	13 Aug 202000:00	–	cnvd

11 Aug 2020 07:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.5

CVSS 25.5

EPSS0.01882

SSVC