Vulnerability in Microsoft Sharepoint Enterprise Server 2016
CVE-2020-1505
An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s…
EPSS: 0.012 (79.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C.
Affected products
- Microsoft Sharepoint Enterprise Server 2016 — versions 16.0.0
- Microsoft Sharepoint Foundation 2013 Service Pack 1 — versions 15.0.0
- Microsoft Sharepoint Server 2010 Service Pack 2 — versions 13.0.0.0
- Microsoft Sharepoint Server 2019 — versions 16.0.0
References
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1505 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-1505?
- CVE-2020-1505 is a medium-severity vulnerability in Microsoft Sharepoint Enterprise Server 2016. CVSS score: 5.5/10. Published 2020-08-17.
- How severe is CVE-2020-1505?
- Medium severity. CVSS v3 base score is 5.5 out of 10.