[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy1MY0Xxk_xQjdaQQ8Va-6NRPuC4qOPxifbXyH0LGwxw":3,"g5a-risk:CVE-2020-16952":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":26,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":65,"references":66,"referencesCount":79,"weaknesses":80,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":26,"otxData":26,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":129,"notableEvents":130},"CVE-2020-16952","What is CVE-2020-16952?","A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.\nExploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.\nThe security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.","A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacke...","2020-10-16T23:15:16.32","2023-12-31T20:15:57.903",8.6,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":39,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"secure@microsoft.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,4.7,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":35,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOCAL","REQUIRED",7.8,1.8,5.9,[40],{"Source":30,"Type":18,"CVSSData":41,"BaseSeverity":44,"ExploitabilityScore":12,"ImpactScore":47,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":4},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":44,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,6.4,0.71095,[48,48,48,48,48,48,48],"High",[52,57,61],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"microsoft","sharepoint_enterprise_server","2016","cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":59,"criteria":60,"vulnerable":4},"sharepoint_foundation","2013","cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",{"vendor":53,"product":62,"version":63,"criteria":64,"vulnerable":4},"sharepoint_server","2019","cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",3,[67,73],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F159612\u002FMicrosoft-SharePoint-SSI-ViewState-Remote-Code-Execution.html","Packetstormsecurity",[71,72],"Exploit","Third Party Advisory",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fportal.msrc.microsoft.com\u002Fen-US\u002Fsecurity-guidance\u002Fadvisory\u002FCVE-2020-16952","Microsoft",[77,78],"Patch","Vendor Advisory",2,[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-346","Origin Validation Error","The product does not properly verify that the source of data or communication is valid.","","Draft","Class","Simple",1,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2020-16952? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-16952, a high severity cyber security vulnerability from 2020. High exploit probability (71.1%). A remote code execution v...","CVE-2020-16952, CVE-2020-16952 vulnerability, CVE-2020-16952 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, microsoft security, sharepoint_enterprise_server vulnerability, sharepoint_foundation vulnerability, sharepoint_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2020-16952",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-16952","Cybersecurity","CVE-2020-16952, CVE-2020-16952 vulnerability, CVE-2020-16952 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":26,"Negate":26,"Nodes":119},[120],{"Operator":121,"Negate":26,"CPEMatch":122},"OR",[123,125,127],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9C082CC4-6128-475D-BC19-B239E348FDB2",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F71184B1-7461-4A05-A5D2-03D9EDDC30D5",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6122D014-5BF1-4AF4-8B4D-80205ED7785E",[],[],{"lastModified":11,"cacheTime":132,"version":42},1792333033147,{"score":134,"band":135,"action":136,"scoredAt":137},68,"Medium","Plan remediation","2026-10-16T06:49:38.303958+00:00"]