cvelist/2020/16xxx/CVE-2020-16952.json

{
  "data_type": "CVE",
  "data_format": "MITRE",
  "data_version": "4.0",
  "CVE_data_meta": {
    "ASSIGNER": "secure@microsoft.com",
    "ID": "CVE-2020-16952",
    "STATE": "PUBLIC"
  },
  "affects": {
    "vendor": {
      "vendor_data": [
        {
          "product": {
            "product_data": [
              {
                "product_name": "Microsoft SharePoint Enterprise Server 2016",
                "version": {
                  "version_data": [
                    {
                      "version_value": ""
                    }
                  ]
                }
              },
              {
                "product_name": "Microsoft SharePoint Server 2019",
                "version": {
                  "version_data": [
                    {
                      "version_value": ""
                    }
                  ]
                }
              },
              {
                "product_name": "Microsoft SharePoint Foundation 2013 Service Pack 1",
                "version": {
                  "version_data": [
                    {
                      "version_value": ""
                    }
                  ]
                }
              }
            ]
          },
          "vendor_name": "Microsoft"
        }
      ]
    }
  },
  "description": {
    "description_data": [
      {
        "lang": "eng",
        "value": "A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka \u0027Microsoft SharePoint Remote Code Execution Vulnerability\u0027. This CVE ID is unique from CVE-2020-16951."
      }
    ]
  },
  "problemtype": {
    "problemtype_data": [
      {
        "description": [
          {
            "lang": "eng",
            "value": "Remote Code Execution"
          }
        ]
      }
    ]
  },
  "references": {
    "reference_data": [
      {
        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16952"
      }
    ]
  }
}