csirt@kutim:~/threat-intel/cve/CVE-2020-1505

Katalog CVE

CVSS 5.5 · Medium EPSS 1,3%

Kerentanan pada microsoft sharepoint enterprise server, microsoft sharepoint foundation +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut microsoft.com.

Deskripsi (NVD)

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how Microsoft SharePoint Server handles objects in memory.

Rincian

Terbit di NVD
17 Agustus 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber microsoft.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator
EPSS (30 hari)
1,3% peluang dieksploitasi; lebih tinggi dari 70,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
microsoft sharepoint enterprise server Versi 2016
microsoft sharepoint foundation Versi 2013 sp1
microsoft sharepoint server Versi 2010 sp2
microsoft sharepoint server Versi 2019

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.