CVE-2020-0872

CVSS 3.1: 9.6 critical
EPSS: 10%p95
Published: Mar 12, 2020 · Mar 12, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-0872 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka 'Remote Code Execution Vulnerability in Application Inspector'.

Vendors: microsoft

Products: application inspector

Weakness: CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.1%)

In the news

3 stories

Microsoft Patch Tuesday, March 2020 Edition

Krebs on SecurityMar 11, 03:15 UTC · Mar 11, 2020VulnerabilityCVE-2020-0688 CVE-2020-0852 CVE-2020-08721

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

Cisco TalosMar 10, 17:23 UTC · Mar 10, 2020VulnerabilityCVE-2020-0796 CVE-2020-0684 CVE-2020-0801+1142 · 1 read

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2020VulnerabilityExploitedCVE-2020-0852 CVE-2020-0684 CVE-2020-0872+31 · 1 read