CVE-2020-1454

No fix known EPSS 2%CVSS 5.4

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.

Published 2020-07-14 · CVE record · OSV

Products: Microsoft SharePoint Enterprise Server, Microsoft SharePoint Server