CVE-2020-16941

Katalog CVE

CVSS 4.1 · Medium EPSS 0,90%

Kerentanan pada microsoft sharepoint enterprise server, microsoft sharepoint foundation +1 lainnya. Skor CVSS 3.1 4.1 (Medium) menurut microsoft.com.

Deskripsi (NVD)

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page.</p> <p>To take advantage of the vulnerability, an attacker would require access to the specific SharePoint page affected by this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how scripts are referenced on some SharePoint pages.</p>

Rincian

Terbit di NVD

16 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.1 (Medium), sumber microsoft.com
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16941 patch · advisory vendor