CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-07-14
Microsoft .NET Framework, SharePoint, and Visual Studio XML Deserialization Remote Code Execution Vulnerability (CVE-2020-1147)
[Affected Scope] Unpatched installations of .NET Framework, Microsoft SharePoint Server, and Visual Studio
[Impact] Remote attackers can execute arbitrary code (RCE) with high privileges by sending a specially crafted XML payload to vulnerable endpoints
[Mitigation] Apply the official Microsoft security updates immediately and restrict untrusted XML deserialization using DataSet/DataTable