Vulnerability in Microsoft Sharepoint Enterprise Server 2016
CVE-2020-1505
An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s…
EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.
Affected products
- Microsoft Sharepoint Enterprise Server 2016 — versions 16.0.0
- Microsoft Sharepoint Foundation 2013 Service Pack 1 — versions 15.0.0
- Microsoft Sharepoint Server 2010 Service Pack 2 — versions 13.0.0.0
- Microsoft Sharepoint Server 2019 — versions 16.0.0
- Microsoft Sharepoint_enterprise_server — versions 2016
- Microsoft Sharepoint_foundation — versions 2013
- Microsoft Sharepoint_server — versions 2010, 2019
References
- secure@microsoft.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-1505?
- CVE-2020-1505 is a medium-severity vulnerability in Microsoft Sharepoint Enterprise Server 2016. CVSS score: 5.5/10. Published 2020-08-17.
- How severe is CVE-2020-1505?
- Medium severity. CVSS v3 base score is 5.5 out of 10.