CyberSec.Space Logo
CVEブラウザに戻る

CVE-2020-1147

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score34.1880%
EPSS Percentile91.73th
Published2020年7月14日
Last Modified2025年10月29日

Vulnerability Description

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

Affected Platforms (CPE)

📦
Microsoft

.net Core

= 2.1
📦
Microsoft

.net Core

= 3.1
📦
Microsoft

.net Framework

= 2.0
📦
Microsoft

.net Framework

= 3.0
📦
Microsoft

.net Framework

= 3.5
📦
Microsoft

.net Framework

= 4.6.2
📦
Microsoft

.net Framework

= 4.7
📦
Microsoft

.net Framework

= 4.7.1
📦
Microsoft

.net Framework

= 4.7.2
📦
Microsoft

.net Framework

= 4.6
📦
Microsoft

.net Framework

= 4.6.1
📦
Microsoft

.net Framework

= 4.8
📦
Microsoft

.net Framework

= 3.5.1
📦
Microsoft

.net Framework

= 4.5.2
📦
Microsoft

Sharepoint Enterprise Server

= 2013
📦
Microsoft

Sharepoint Enterprise Server

= 2016
📦
Microsoft

Sharepoint Server

= 2010
📦
Microsoft

Sharepoint Server

= 2019
📦
Microsoft

Visual Studio 2017

>= 15.0 and <= 15.9
📦
Microsoft

Visual Studio 2019

>= 16.0 and <= 16.6

References & Advisories

関連する脆弱性情報