CVE-2020-0920

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server2016
MicrosoftMicrosoft SharePoint Server2019
MicrosoftMicrosoft SharePoint Foundation2010 Service Pack 2; 2013 Service Pack 1

References

Timeline

Published
Apr 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-09215.5Microsoft Graphics Component Denial of Service VulnerabilityCVE-2020-09228.8<p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successCVE-2020-09235.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-09245.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-09255.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-09265.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-09275.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-09285.5<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfullyCVE-2020-09298.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paCVE-2020-09305.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-09318.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paCVE-2020-09328.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa
CVE-2020-0920: High severity, CVSS 8.8 | Vulnix