| Package | Affected versions | Patched versions |
|---|---|---|
| business productivity servers | = 2010 | |
| sharepoint enterprise server | = 2016 | |
| sharepoint foundation | = 2013 |
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0891.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free