Description of the security update for SharePoint Server 2010: September 8, 2020

🗓️ 08 Sep 2020 07:00:00Reported by MicrosoftType

This update for SharePoint Server 2010 resolves vulnerabilities in Microsoft Office allowing remote code execution. Installation methods include Microsoft Update, Update Catalog, and Download Center

Reporter	Title	Published	Views	Family All 58
Gitee	Exploit for CVE-2020-1189	14 Sep 202518:19	–	gitee
ATTACKERKB	CVE-2020-1210	11 Sep 202000:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Business Productivity Servers, SharePoint Server, and SharePoint Enterprise Server lies in errors in the mechanism for checking the source code of application packages. This allows attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the fact that code loading occurs without any checks for its integrity, allowing attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages arises from insufficient validation of input data, allowing unauthorized access to data modifications.	24 Sep 202000:00	–	bdu_fstec
CNVD	Microsoft SharePoint Server Tampering Vulnerability	10 Sep 202000:00	–	cnvd
CNVD	Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-63729)	9 Sep 202000:00	–	cnvd
CNVD	Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-63732)	9 Sep 202000:00	–	cnvd
Check Point Advisories	Microsoft Sharepoint Remote Code Execution (CVE-2020-1210)	27 Dec 202000:00	–	checkpoint_advisories

08 Sep 2020 07:00Current

7.9High risk

Vulners AI Score7.9

CVSS 26.5

CVSS 3.18.8 - 9.9

EPSS0.01773