CVE-2020-1439

HIGH 8.8CVE-2020-1439 · Published 14/07/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
sharepoint enterprise server microsoft	`= 2013= 2016`	No fix yet
sharepoint foundation microsoft	`= 2013`	No fix yet
sharepoint server microsoft	`= 2010= 2019`	No fix yet

Description

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1439 · Patch
zerodayinitiative.com/advisories/ZDI-20-874 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free