VDB
BDU%3A2020-03369
BDU%3A2020-03369
PUBLISHED
CVSS 10 CRITICAL
Уязвимость программной платформы Microsoft .NET Framework, средства разработки программного обеспечения Microsoft Visual Studio, пакетов программ Microsoft SharePoint Server и Microsoft SharePoint Enterprise Server, связанная с ошибками при обработке XML-запросов, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp, АО «ИВК» | Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft SharePoint Server, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6.1, Microsoft .NET Framework 4.7, Microsoft .NET Framework 4.6.2, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.7.2, .NET Core, Microsoft SharePoint Server 2019, Microsoft .NET Framework 4.8, Microsoft Visual Studio 2019, Microsoft Visual Studio 2017, Альт 8 СП (запись в едином реестре российских программ №4305), Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.0 Service Pack 2 |
Timeline
- Jul 17, 2020 CVE Published
- Sep 24, 2024 CVE Updated
- Mar 19, 2026 Security Advisory
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 url
- https://nvd.nist.gov/vuln/detail/CVE-2020-1147 url
- https://www.cybersecurity-help.cz/vdb/SB2020071463 url
- https://access.redhat.com/security/cve/CVE-2020-1147 url
- http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html url
- https://altsp.su/obnovleniya-bezopasnosti/ url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url