vulnerability
Microsoft SharePoint: CVE-2020-1439: PerformancePoint Services Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Jul 14, 2020 | May 15, 2023 | Aug 12, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Jul 14, 2020
Added
May 15, 2023
Modified
Aug 12, 2025
Description
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.
Solutions
microsoft-sharepoint-sharepoint_2016-kb4484436microsoft-sharepoint-sharepoint_2016-kb4484440microsoft-sharepoint-sharepoint_2019-kb4484453
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.