Vulnerability in Microsoft Sharepoint Enterprise Server 2016
CVE-2020-16948
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the use…
EPSS: 0.198 (95.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C.
Affected products
- Microsoft Sharepoint Enterprise Server 2016 — versions 16.0.0
- Microsoft Sharepoint Foundation 2010 Service Pack 2 — versions 13.0.0
- Microsoft Sharepoint Foundation 2013 Service Pack 1 — versions 15.0.0
- Microsoft Sharepoint Server 2019 — versions 16.0.0
References
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16948 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-16948?
- CVE-2020-16948 is a medium-severity vulnerability in Microsoft Sharepoint Enterprise Server 2016. CVSS score: 6.5/10. Published 2020-10-16.
- How severe is CVE-2020-16948?
- Medium severity. CVSS v3 base score is 6.5 out of 10.