CVE-2020-1595

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description: A remote code execution issue exists in Microsoft SharePoint due to improper protection of APIs from unsafe data input. This could allow a remote attacker to execute arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation requires accessing a susceptible API on an affected version of SharePoint with specially-formatted input.

Recommendations: For Microsoft SharePoint Server, update the software to a version that correctly handles deserialization of untrusted data. For Microsoft SharePoint Foundation, update the software to a version that correctly handles deserialization of untrusted data. For Microsoft SharePoint Enterprise Server, update the software to a version that correctly handles deserialization of untrusted data.