Unrestricted file upload in Microsoft SharePoint Foundation
Priority MEDIUM 51CWE-434Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-434.
Summary
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974.
Why it matters now
EPSS 0.10695 95th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Microsoft SharePoint Foundation | 2013 Service Pack 1 | — | No fix listed | CNA |
| Microsoft | Microsoft SharePoint Enterprise Server | 2013 Service Pack 1; 2016 | — | No fix listed | CNA |
| Microsoft | Microsoft SharePoint Server | 2019 | — | No fix listed | CNA |
| Microsoft | Microsoft Business Productivity Servers | 2010 Service Pack 2 | — | No fix listed | CNA |
- Microsoft SharePoint Foundation VendorMicrosoft Affected 2013 Service Pack 1 Fixed in — No fix listed CNA
- Microsoft SharePoint Enterprise Server VendorMicrosoft Affected 2013 Service Pack 1; 2016 Fixed in — No fix listed CNA
- Microsoft SharePoint Server VendorMicrosoft Affected 2019 Fixed in — No fix listed CNA
- Microsoft Business Productivity Servers VendorMicrosoft Affected 2010 Service Pack 2 Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:business_productivity_servers:2010:sp2:*:*:*:*:*:* | 2010 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:* | 2013 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* | 2016 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:* | 2013 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* | 2019 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:business_productivity_servers:2010:sp2:*:*:*:*:*:* Versions 2010 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:* Versions 2013 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* Versions 2016 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:* Versions 2013 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* Versions 2019 Vulnerable ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-0931
- 2026-10-03 Alias added: GHSA-p4vm-jv89-q82f
More Microsoft Business Productivity Servers vulnerabilities
- TI-2021-08646 Microsoft SharePoint Server Remote Code Execution Vulnerability CVSS 3.1HIGH 8.8
- TI-2017-00221 Memory corruption in Microsoft Office 2007 SP2 and SP3, Microsoft Office 2010 SP2… CVSS 3.0HIGH 7.8
- TI-2020-00770 Cross-site scripting in Microsoft SharePoint Enterprise Server CVSS 3.1MEDIUM 5.4
- TI-2019-00351 Cross-site scripting in Microsoft SharePoint Server CVSS 3.1MEDIUM 5.4
Sources
- CVE-2020-0931 · CVE Program
- CVE-2020-0931 · NVD
- FIRST EPSS
- GHSA-p4vm-jv89-q82f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences