CVE-2020-0891

No fix known EPSS 2%CVSS 5.4

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795.

Published 2020-03-12 · CVE record · OSV

Products: Microsoft SharePoint Enterprise Server, Microsoft SharePoint Server, Microsoft SharePoint Foundation