CVE-2020-0932

high · 8.8

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0971, CVE-2020-0974.

8.8

CVSS

31.2%

EPSS (exploit prob.)

98th

EPSS percentile

2020-04-15

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-434

Affected products

Vendor	Product	Affected versions
microsoft	sharepoint_enterprise_server	2016
microsoft	sharepoint_foundation	2013
microsoft	sharepoint_server	2019

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0932
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0932

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-0932