CVE-2020-1439

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 20%

exploitation probability

20%top 3% of all CVEs

observed exploitation

nono source reports it

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.

Affected products

Microsoft · Microsoft SharePoint Enterprise Server Microsoft · Microsoft SharePoint Foundation Microsoft · Microsoft SharePoint Server

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1439 https://www.zerodayinitiative.com/advisories/ZDI-20-874/