Unrated severityNVD Advisory· Published Jul 14, 2020· Updated Aug 4, 2024

CVE-2020-1439

Description

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/PerformancePoint Servicesllm-create
Microsoft/Sharepoint Servercpe-rescue2 versions
2013 Service Pack 1+ 1 more
- (no CPE)range: 2013 Service Pack 1
- (no CPE)range: 2019
Microsoft/Sharepoint Foundationcpe-rescue
Range: 2013 Service Pack 1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1439mitrex_refsource_MISC
www.zerodayinitiative.com/advisories/ZDI-20-874/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.016
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000