What is CVE-2020-17115?

CVE-2020-17115 is a security advisory published by Microsoft Security Response Center (MSRC) with Medium severity. Microsoft SharePoint Server Spoofing Vulnerability

Which CVE IDs does CVE-2020-17115 cover?

CVE-2020-17115 covers the following CVE IDs: CVE-2020-17115. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2020-17115?

CVE-2020-17115 has a CVSS v3 base score of 8.0, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2020-17115?

CVE-2020-17115 affects 4 products, including: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Foundation 2010 Service Pack 2; Microsoft SharePoint Foundation 2013 Service Pack 1; Microsoft SharePoint Server 2019.

CVE-2020-17115MediumCVSS 8.0

Microsoft SharePoint Server Spoofing Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

December 8, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-17115 →

📋 Description

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software? Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

🎯 Affected products4

Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Server 2019

✅ Remediation

KB4486751 (Security Update) KB4486752 (Security Update) KB4486753 (Security Update) KB4493149 (Security Update) KB4493138 (Security Update)

🔗 References (11)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17115
patchhttps://www.microsoft.com/download/details.aspx?familyid=a54b63ac-4c27-4e32-89b4-4a86b2a90f20
referencehttps://support.microsoft.com/kb/4486751
patchhttps://www.microsoft.com/download/details.aspx?familyid=03e5f674-f5a6-49d7-a0ca-9a2701116f65
referencehttps://support.microsoft.com/kb/4486752
patchhttps://www.microsoft.com/download/details.aspx?familyid=9f6f9da2-92d0-4872-b1cc-4718a2381530
referencehttps://support.microsoft.com/kb/4486753
patchhttps://www.microsoft.com/download/details.aspx?familyid=4abefe8e-b03a-47b2-be74-e57a2a7610a4
referencehttps://support.microsoft.com/kb/4493149
patchhttps://www.microsoft.com/download/details.aspx?familyid=259a4b86-7086-4240-8928-d40956abc4db
referencehttps://support.microsoft.com/kb/4493138