CVE-2020-0971

HIGH 8.8CVE-2020-0971 · Published 15/04/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
sharepoint enterprise server microsoft	`= 2016`	No fix yet
sharepoint foundation microsoft	`= 2010= 2013`	No fix yet
sharepoint server microsoft	`= 2019`	No fix yet

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0974.

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0971 · Patch
zerodayinitiative.com/advisories/ZDI-20-1398 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free