VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-0931

CVE-2020-0931

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974.

Affected products

10
  • Microsoft/Business Productivity Servers
    cpe:2.3:a:microsoft:business_productivity_servers:2010:sp2:*:*:*:*:*:*
  • Microsoft/Sharepoint Server6 versions
    cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 2013 Service Pack 1
    • (no CPE)range: 2019
  • Microsoft/Sharepoint Foundation2 versions
    cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
    • (no CPE)range: 2013 Service Pack 1
  • Microsoft/Microsoft Business Productivity Serversv5
    Range: 2010 Service Pack 2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.