Medium severity5.4NVD Advisory· Published Jul 14, 2020· Updated Jun 17, 2026
CVE-2020-1454
CVE-2020-1454
Description
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.
Affected products
5cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 2016
- (no CPE)range: 2019
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1454nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.