CVE-2020-0920

—

CVSS 3.1

8.8 high

EPSS

10%p95

Published

Apr 15, 2020 (Apr 15, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974.

Vendors: microsoft
Products: sharepoint enterprise server, sharepoint foundation, sharepoint server
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.4%)

In the news1 stories

Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage

Cisco TalosApr 14, 18:08 UTC · Apr 14, 2020Vulnerability CVE-2020-0939 CVE-2020-0687 CVE-2020-0907+110 CVEs