CVE-2020-1102
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.
Risk Assessment
Exploitation requires a user to upload a specially crafted SharePoint application package, which could lead to full compromise of the SharePoint server.
Recommendation
Install the security update that corrects how SharePoint checks the source markup of application packages.
Other vulnerabilities in Microsoft SharePoint
See all- CVE-2026-45659HighActively exploited
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code remotely over a network.
- CVE-2024-38094HighActively exploited
A vulnerability in Microsoft SharePoint allows for remote code execution. The NVD description does not provide technical details or attack vectors.
- CVE-2023-33157High
A vulnerability in Microsoft SharePoint allows for remote code execution, potentially leading to unauthorized access to the system.
- CVE-2020-1024High
A remote code execution vulnerability in Microsoft SharePoint due to failure to check the source markup of application packages. An attacker could exploit it by uploading a specially crafted SharePoint application package. The update corrects how SharePoint checks source markup.
- CVE-2020-1023High
A remote code execution vulnerability in Microsoft SharePoint due to failure to check the source markup of application packages. An attacker could exploit it by uploading a specially crafted SharePoint application package. The update corrects how SharePoint checks source markup.
- CVE-2019-0604CriticalActively exploited
Microsoft SharePoint has a remote code execution vulnerability when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
Original NVD description (English source)
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint. The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS