Description of the security update for SharePoint Foundation 2013: September 8, 2020

🗓️ 08 Sep 2020 07:00:00Reported by MicrosoftType

Security update for SharePoint Foundation 2013 resolves remote code execution vulnerabilities, requires SP1, and addresses known issues with "Result Sources" and SharePoint ghosted pages

Reporter	Title	Published	Views	Family All 134
Gitee	Exploit for CVE-2020-1189	14 Sep 202518:19	–	gitee
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the fact that code loading occurs without any checks for its integrity, allowing attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the software interface of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server’s API packages allows a perpetrator to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Foundation software, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server packages arises from errors in the mechanism for checking the source code of the application package. This allows a malicious actor to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.	24 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spoofing attacks.	24 Sep 202000:00	–	bdu_fstec

08 Sep 2020 07:00Current

7.3High risk

Vulners AI Score7.3

CVSS 27.5

CVSS 3.18.8 - 9.9

EPSS0.02687

SSVC