vulnerability

Microsoft CVE-2020-1439: PerformancePoint Services Remote Code Execution Vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
7	(AV:N/AC:L/Au:S/C:P/I:P/A:P)	Jul 14, 2020	Jul 14, 2020	Feb 27, 2023

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

Published

Jul 14, 2020

Added

Jul 14, 2020

Modified

Feb 27, 2023

Description

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.

Solution(s)

msft-kb4484353-b80a9655-3572-4a9b-9db3-d7c90aee95e1msft-kb4484374-aebce856-a78d-41bc-ad94-f85434b654cbmsft-kb4484411-f97742ba-cb7a-4dd2-a5f2-11172fdcb041msft-kb4484443-8ef57bdc-d0f6-4ebb-b9bf-713f4e35272cmsft-kb4484448-5e6ed6b4-cced-4124-b143-7fc61973017fmsft-kb4484451-bff86096-6c0c-43fc-bb24-ec5abcae98d4

References

CVE-2020-1439
https://attackerkb.com/topics/CVE-2020-1439
MSKB-4484353
MSKB-4484374
MSKB-4484411
MSKB-4484436
MSKB-4484440
MSKB-4484443
MSKB-4484448
MSKB-4484451
MSKB-4484453

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today