A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.
Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.
The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.
",Microsoft,"Microsoft Sharepoint Enterprise Server 2016,Microsoft Business Productivity Servers 2010 Service Pack 2,Microsoft Sharepoint Server 2010 Service Pack 2,Microsoft Sharepoint Enterprise Server 2013 Service Pack 1,Microsoft Sharepoint Server 2019",9.9,CRITICAL,0.0218299999833107,false,false,false,false,,false,false,2020-09-11T17:09:07.000Z,0 CVE-2020-0931,https://securityvulnerability.io/vulnerability/CVE-2020-0931,,"A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974.",Microsoft,"Microsoft Sharepoint Foundation,Microsoft Sharepoint Enterprise Server,Microsoft Sharepoint Server,Microsoft Business Productivity Servers",8.8,HIGH,0.02336999960243702,false,false,false,false,,false,false,2020-04-15T15:12:52.000Z,0 CVE-2020-0795,https://securityvulnerability.io/vulnerability/CVE-2020-0795,,"This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0891.",Microsoft,"Microsoft Sharepoint Enterprise Server,Microsoft Business Productivity Servers,Microsoft Sharepoint Foundation",5.4,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2020-03-12T15:48:18.000Z,0 CVE-2019-0558,https://securityvulnerability.io/vulnerability/CVE-2019-0558,,"A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka ""Microsoft Office SharePoint XSS Vulnerability."" This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.",Microsoft,"Microsoft Sharepoint Server,Microsoft Sharepoint,Microsoft Business Productivity Servers",5.4,MEDIUM,0.0015999999595806003,false,false,false,false,,false,false,2019-01-08T21:00:00.000Z,0 CVE-2017-0243,https://securityvulnerability.io/vulnerability/CVE-2017-0243,,"Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka ""Microsoft Office Remote Code Execution Vulnerability"". This CVE ID is unique from CVE-2017-8570.",Microsoft,"Microsoft Office 2007 Sp2 And Sp3, Microsoft Office 2010 Sp2, Microsoft Office Web Apps 2010 Sp2, And Microsoft Business Productivity Servers 2010 Sp2.",7.8,HIGH,0.8329200148582458,false,false,false,false,,false,false,2017-07-11T00:00:00.000Z,0