5.4Media

CVE-2020-1451

Microsoft Microsoft SharePoint Enterprise Server; Microsoft Microsoft SharePoint Server Publicada: (hace 6 años)

Descripción

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456.

Debilidad (CWE): CWE-79

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Microsoft Microsoft SharePoint Enterprise Server 2016, 2013 Service Pack 1
Microsoft Microsoft SharePoint Server 2019, 2010 Service Pack 2

Referencias y parches