Description (CNA)
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Microsoft SharePoint Enterprise Server | affected 2013 Service Pack 1; affected 2016 |
| Microsoft / Microsoft SharePoint Server | affected 2019; affected 2010 Service Pack 2 |
| Microsoft / Microsoft SharePoint Foundation | affected 2013 Service Pack 1 |
CWE
No CWE identifiers supplied.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1439
- https://www.zerodayinitiative.com/advisories/ZDI-20-874/
ADP enrichment
No English description supplied.