CVE-2020-1454: XSS
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1454?
CVE-2020-1454 is rated as an important severity vulnerability, indicating a moderate level of risk to affected systems.
How can CVE-2020-1454 be mitigated?
To mitigate CVE-2020-1454, it is recommended to apply the latest security updates provided by Microsoft for affected SharePoint Server versions.
Who is affected by CVE-2020-1454?
CVE-2020-1454 affects users of Microsoft SharePoint Enterprise Server 2016 and SharePoint Server 2019.
What kind of attack can exploit CVE-2020-1454?
An authenticated attacker could exploit CVE-2020-1454 by sending a specially crafted request to an affected SharePoint server.
What should organizations do if they are using the affected SharePoint versions related to CVE-2020-1454?
Organizations should immediately review their SharePoint deployment and implement the provided patches and updates to address CVE-2020-1454.