CyberSec.Space Logo
Back to CVE Browser

CVE-2020-1147

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score34.1880%
EPSS Percentile91.73th
PublishedJul 14, 2020
Last ModifiedOct 29, 2025

Vulnerability Description

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

Affected Platforms (CPE)

πŸ“¦
Microsoft

.net Core

= 2.1
πŸ“¦
Microsoft

.net Core

= 3.1
πŸ“¦
Microsoft

.net Framework

= 2.0
πŸ“¦
Microsoft

.net Framework

= 3.0
πŸ“¦
Microsoft

.net Framework

= 3.5
πŸ“¦
Microsoft

.net Framework

= 4.6.2
πŸ“¦
Microsoft

.net Framework

= 4.7
πŸ“¦
Microsoft

.net Framework

= 4.7.1
πŸ“¦
Microsoft

.net Framework

= 4.7.2
πŸ“¦
Microsoft

.net Framework

= 4.6
πŸ“¦
Microsoft

.net Framework

= 4.6.1
πŸ“¦
Microsoft

.net Framework

= 4.8
πŸ“¦
Microsoft

.net Framework

= 3.5.1
πŸ“¦
Microsoft

.net Framework

= 4.5.2
πŸ“¦
Microsoft

Sharepoint Enterprise Server

= 2013
πŸ“¦
Microsoft

Sharepoint Enterprise Server

= 2016
πŸ“¦
Microsoft

Sharepoint Server

= 2010
πŸ“¦
Microsoft

Sharepoint Server

= 2019
πŸ“¦
Microsoft

Visual Studio 2017

>= 15.0 and <= 15.9
πŸ“¦
Microsoft

Visual Studio 2019

>= 16.0 and <= 16.6

References & Advisories

Related Vulnerabilities