{"id":"CVE-2020-0931","state":"PUBLISHED","title":"A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote ","description":"A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974.","publishedAt":"2020-04-15T15:12:52.000Z","updatedAt":"2024-08-04T06:18:03.608Z","severity":null,"assigner":"microsoft","products":["Microsoft Microsoft SharePoint Foundation","Microsoft Microsoft SharePoint Enterprise Server","Microsoft Microsoft SharePoint Server","Microsoft Microsoft Business Productivity Servers"],"affected":[{"vendor":"Microsoft","product":"Microsoft SharePoint Foundation","versions":[{"version":"2013 Service Pack 1","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server","versions":[{"version":"2013 Service Pack 1","status":"affected"},{"version":"2016","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server","versions":[{"version":"2019","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft Business Productivity Servers","versions":[{"version":"2010 Service Pack 2","status":"affected"}]}],"references":["https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0931"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:18.551Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/0xxx/CVE-2020-0931.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-0931","state":"PUBLISHED","datePublished":"2020-04-15T15:12:52.000Z","dateUpdated":"2024-08-04T06:18:03.608Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2019-11-04T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974."}],"affected":[{"vendor":"Microsoft","product":"Microsoft SharePoint Foundation","versions":[{"version":"2013 Service Pack 1","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server","versions":[{"version":"2013 Service Pack 1","status":"affected"},{"version":"2016","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server","versions":[{"version":"2019","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft Business Productivity Servers","versions":[{"version":"2010 Service Pack 2","status":"affected"}]}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0931","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Remote Code Execution","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"microsoft","dateUpdated":"2020-04-15T15:12:52.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","ID":"CVE-2020-0931","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Microsoft SharePoint Foundation","version":{"version_data":[{"version_value":"2013 Service Pack 1"}]}},{"product_name":"Microsoft SharePoint Enterprise Server","version":{"version_data":[{"version_value":"2013 Service Pack 1"},{"version_value":"2016"}]}},{"product_name":"Microsoft SharePoint Server","version":{"version_data":[{"version_value":"2019"}]}},{"product_name":"Microsoft Business Productivity Servers","version":{"version_data":[{"version_value":"2010 Service Pack 2"}]}}]},"vendor_name":"Microsoft"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Remote Code Execution"}]}]},"references":{"reference_data":[{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0931","refsource":"MISC","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0931"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0931","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T06:18:03.608Z"}}]}}}