CVE-2020-0973: Microsoft Office SharePoint XSS Vulnerability
CVE-2020-0973 is a spoofing vulnerability in Microsoft Office SharePoint XSS, rated Important by Microsoft. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 1.52% probability of exploitation activity in the next 30 days, higher than 75% of all scored vulnerabilities. Microsoft released the fix on 14 April 2020 in the April 2020 Patch Tuesday, delivered through 4 security updates (KB4484299, KB4484308, KB4484292, KB4484297). It affects 4 products in 1 product family (Microsoft Office).
Key facts
- CVE ID
- CVE-2020-0973
- Severity
- N/A
- Microsoft severity
- Important
- Impact
- Spoofing
- Exploited in the wild
- No
- Publicly disclosed
- No
- Exploitation likelihood
- Less Likely
- Weakness
- CWE-79
- EPSS
- 1.52% (percentile 75%)
- CISA KEV
- Not listed
- Released
- Last updated
- Patch Tuesday
- April 2020 Patch Tuesday
- Product families
- Microsoft Office
Description
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.
The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.
Frequently asked questions (Microsoft)
Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.
Affected products (4)
Microsoft Office
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Microsoft SharePoint Enterprise Server 2016 | KB4484299 | Security Update | Maybe | |
| Microsoft SharePoint Enterprise Server 2013 Service Pack 1 | KB4484308 | Security Update | Maybe | |
| Microsoft SharePoint Server 2019 | KB4484292 | Security Update | Maybe | |
| Microsoft SharePoint Server 2010 Service Pack 2 | KB4484297 | Security Update |
Security updates (4)
NIST NVD data
- NVD status
- Modified
- NVD CVSS
- 5.4 (MEDIUM)
- NVD weakness
- CWE-79
- Published to NVD
- NVD last modified
Affected configurations (CPE)
| Product | Vulnerable versions |
|---|---|
| sharepoint enterprise server 2013 | all listed versions |
| sharepoint enterprise server 2016 | all listed versions |
| sharepoint server 2010 | all listed versions |
| sharepoint server 2019 | all listed versions |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0973 (Patch, Vendor Advisory)
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0973 (Patch, Vendor Advisory)
Acknowledgments
Revision history
| Version | Date | Description |
|---|---|---|
| 1.0 | Information published. |