CVE-2020-1573: Microsoft Office SharePoint XSS Vulnerability
First published: Mon Aug 17 2020(Updated: )
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1580.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Sharepoint Designer | =2013-sp1 | |
| Microsoft SharePoint Enterprise Server | =2016 | |
| Microsoft SharePoint Foundation | =2010-sp2 | |
| Microsoft SharePoint Foundation | =2013-sp1 | |
| Microsoft SharePoint Server | =2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-1573?
The severity of CVE-2020-1573 is medium.
What is the affected software for CVE-2020-1573?
The affected software for CVE-2020-1573 includes Microsoft SharePoint Designer 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Foundation 2010 SP2, Microsoft SharePoint Foundation 2013 SP1, and Microsoft SharePoint Server 2019.
What is the vulnerability description of CVE-2020-1573?
CVE-2020-1573 is a cross-site-scripting (XSS) vulnerability that exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request.
How can I fix CVE-2020-1573?
To fix CVE-2020-1573, apply the necessary security updates provided by Microsoft.
Where can I find more information about CVE-2020-1573?
For more information about CVE-2020-1573, refer to the Microsoft Security Guidance Advisory.
- collector/nvd-index
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/title
- agent/remedy
- agent/severity
- agent/references
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft sharepoint designer
- version/microsoft sharepoint designer/2013-sp1
- canonical/microsoft sharepoint enterprise server
- version/microsoft sharepoint enterprise server/2016
- canonical/microsoft sharepoint foundation
- version/microsoft sharepoint foundation/2010-sp2
- version/microsoft sharepoint foundation/2013-sp1
- canonical/microsoft sharepoint server
- version/microsoft sharepoint server/2019