| Package | Affected versions | Patched versions |
|---|---|---|
| sharepoint enterprise server | = 2016 | |
| sharepoint foundation | = 2010= 2013 | |
| sharepoint server | = 2019 |
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free