Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:E6BD4207-BAC0-40E1-A4C8-92B6D3D58D4B
HistoryOct 16, 2020 - 12:00 a.m.

CVE-2020-16952 — Microsoft SharePoint Remote Code Execution Vulnerabilities

2020-10-1600:00:00
attackerkb.com
788

0.973 High

EPSS

Percentile

99.9%

JSON

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka ‘Microsoft SharePoint Remote Code Execution Vulnerability’. This CVE ID is unique from CVE-2020-16951.

Recent assessments:

wvu-r7 at October 13, 2020 7:56pm UTC reported:

Please see the Rapid7 analysis. A Metasploit module will be released.

ccondon-r7 at October 16, 2020 7:04pm UTC reported:

Please see the Rapid7 analysis. A Metasploit module will be released.

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 4

Related

qualysblog 10
nvd 4
mscve 8
prion 4
checkpoint_advisories 4
cvelist 4
metasploit 3
cisa 3
srcincite 2
packetstorm 4
nuclei 1
cve 4
zdt 4
githubexploit 19
rapid7blog 7
threatpost 38
exploitpack 1
securelist 4
mskb 11
attackerkb 5
zdi 1
cisa_kev 1
taosecurity 1
trendmicroblog 1
mssecure 2
canvas 1
trellix 2
krebs 4
nessus 9
exploitdb 2
kaspersky 3
thn 9
0daydb 1
avleonov 4
hivepro 1
ics 8
malwarebytes 1
openvas 5
googleprojectzero 1
talosblog 1
qualysblog
qualysblog
October 2020 Patch Tuesday – 87 Vulnerabilities, 11 Critical, SharePoint, TCP/IP Stack, Graphics, Adobe Vulns
2020-10-13 18:52:03
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (CVE-2020-16898) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
2020-10-14 20:28:33
February 2020 Patch Tuesday – 99 Vulns, 12 Critical, Patch for IE 0-Day, Exchange Vuln, Adobe Vulns
2020-02-11 19:47:15
nvd
nvd
CVE-2020-16952
2020-10-16 23:15:16
CVE-2020-16951
2020-10-16 23:15:16
CVE-2020-16898
2020-10-16 23:15:13
mscve
mscve
Microsoft SharePoint Remote Code Execution Vulnerability
2020-10-13 07:00:00
Microsoft SharePoint Remote Code Execution Vulnerability
2020-10-13 07:00:00
Windows TCP/IP Remote Code Execution Vulnerability
2020-10-13 07:00:00
prion
prion
Remote code execution
2020-10-16 23:15:00
Remote code execution
2020-10-16 23:15:00
Remote code execution
2020-10-16 23:15:00
checkpoint_advisories
checkpoint_advisories
Microsoft SharePoint Remote Code Execution (CVE-2020-16952)
2020-10-20 00:00:00
Microsoft SharePoint Server Remote Code Execution (CVE-2020-16951)
2020-12-29 00:00:00
Microsoft Windows TCP/IP Remote Code Execution (CVE-2020-16898)
2020-10-13 00:00:00
cvelist
cvelist
CVE-2020-16952 Microsoft SharePoint Remote Code Execution Vulnerability
2020-10-16 22:18:03
CVE-2020-16951 Microsoft SharePoint Remote Code Execution Vulnerability
2020-10-16 22:18:03
CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability
2020-10-16 22:17:40
metasploit
metasploit
Microsoft SharePoint Server-Side Include and ViewState RCE
2020-10-14 22:45:15
Exchange Control Panel ViewState Deserialization
2020-02-28 02:57:08
Background Intelligent Transfer Service Arbitrary File Move Privilege Elevation Vulnerability
2020-06-10 16:02:49
cisa
cisa
Microsoft Addresses Windows TCP/IP RCE/DoS Vulnerability
2020-10-14 00:00:00
NCSC Releases Alert on Microsoft SharePoint Vulnerability
2020-10-16 00:00:00
Unpatched Microsoft Exchange Servers Vulnerable to CVE-2020-0688
2020-03-10 00:00:00
srcincite
srcincite
SRC-2020-0022 : Microsoft SharePoint Server DataFormWebPart CreateChildControls Server-Side Include Remote Code Execution Vulnerability
2020-07-06 00:00:00
SRC-2020-0024 : Microsoft SharePoint Server TOCTOU ControlParameter Binding Remote Code Execution Vulnerability
2020-08-13 00:00:00
packetstorm
packetstorm
Microsoft SharePoint SSI / ViewState Remote Code Execution
2020-10-19 00:00:00
Exchange Control Panel Viewstate Deserialization
2020-03-04 00:00:00
Microsoft Exchange 2019 15.2.221.12 Remote Code Execution
2020-03-02 00:00:00
nuclei
nuclei
Microsoft SharePoint - Remote Code Execution
2020-10-14 08:49:48
cve
cve
CVE-2020-16952
2020-10-16 23:15:16
CVE-2020-16951
2020-10-16 23:15:16
CVE-2020-16898
2020-10-16 23:15:13
zdt
zdt
Microsoft SharePoint SSI / ViewState Remote Code Execution Exploit
2020-10-19 00:00:00
Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution Exploit
2020-03-02 00:00:00
Exchange Control Panel Viewstate Deserialization Exploit
2020-03-05 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2020-10-16 23:03:15
Exploit for Vulnerability in Microsoft
2020-10-14 03:25:00
Exploit for Vulnerability in Microsoft
2020-10-07 19:56:09
rapid7blog
rapid7blog
Patch Tuesday - October 2020
2020-10-13 23:25:39
Microsoft Exchange 2010 End of Support and Overall Patching Study
2020-09-29 16:05:16
There Goes The Neighborhood: Dealing With CVE-2020-16898 (and CVE-2020-1656) (aka"Bad Neighbor")
2020-10-14 02:38:11
threatpost
threatpost
Facial Recognition 'Consent’ Doesn’t Exist, Threatpost Poll Finds
2019-04-26 12:10:15
Users Urged to Update WordPress Plugin After Flaw Disclosed
2019-04-26 19:44:55
BEC Hack Cons Catholic Church Out of $1.75 Million
2019-04-30 16:21:59
exploitpack
exploitpack
Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution
2020-03-02 00:00:00
securelist
securelist
GReAT Ideas follow-up
2020-07-15 10:00:13
Owowa: the add-on that turns your OWA into a credential stealer and remote access panel
2021-12-14 10:00:39
APT trends report Q2 2020
2020-07-29 10:00:09
mskb
mskb
Description of the security update for Microsoft Exchange Server 2010: February 11, 2020
2020-02-11 08:00:00
Description of the security update for SharePoint Enterprise Server 2016: October 13, 2020
2020-10-13 07:00:00
Description of the security update for SharePoint Server 2019: October 13, 2020
2020-10-13 07:00:00
attackerkb
attackerkb
CVE-2020-0688 - Exchange Control Panel Viewstate Deserialization Bug
2020-02-11 00:00:00
CVE-2020-16898 aka Bad Neighbor / Ping of Death Redux
2020-10-16 00:00:00
CVE-2020-16875
2020-09-11 00:00:00
zdi
zdi
Microsoft Exchange Server Exchange Control Panel Fixed Cryptographic Key Remote Code Execution Vulnerability
2020-02-20 00:00:00
cisa_kev
cisa_kev
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
2021-11-03 00:00:00
taosecurity
taosecurity
If You Can't Patch Your Email Server, You Should Not Be Running It
2020-04-07 15:28:00
trendmicroblog
trendmicroblog
This Week in Security News: Exploring Common Threats to Cloud Security and Zoom Removes Meeting IDs from App Title Bar to Improve Privacy
2020-04-10 12:46:43
mssecure
mssecure
Defending Exchange servers under attack
2020-06-24 16:00:40
Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk
2020-04-28 16:00:49
canvas
canvas
Immunity Canvas: OWA_RCE
2020-02-11 22:15:00
trellix
trellix
CVE-2020-16898: Bad Neighbor | McAfee Blogs
2020-10-13 00:00:00
CVE-2020-16898: Bad Neighbor | McAfee Blogs
2020-10-13 00:00:00
krebs
krebs
Microsoft Patch Tuesday, October 2020 Edition
2020-10-13 20:10:36
Microsoft Patch Tuesday, March 2020 Edition
2020-03-10 23:44:29
Microsoft Patch Tuesday, Sept. 2020 Edition
2020-09-08 21:33:26
nessus
nessus
Security Updates for Microsoft SharePoint Server 2016 (October 2020)
2020-10-13 00:00:00
Security Updates for Microsoft SharePoint Server 2019 (October 2020)
2020-10-13 00:00:00
Security Updates for Exchange (February 2020)
2020-02-11 00:00:00
exploitdb
exploitdb
Exchange Control Panel - Viewstate Deserialization (Metasploit)
2020-03-05 00:00:00
Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution
2020-03-02 00:00:00
kaspersky
kaspersky
KLA11664 Multiple vulnerabilities in Microsoft Exchange Server
2020-02-11 00:00:00
KLA11976 Multiple vulnerabilites in Microsoft Office
2020-10-13 00:00:00
KLA11977 Multiple vulnerabilities in Microsoft Windows
2020-10-13 00:00:00
thn
thn
NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers
2021-07-02 06:23:00
NoxPlayer Supply-Chain Attack is Likely the Work of Gelsemium Hackers
2021-06-14 13:34:00
FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware Landscape
2022-12-22 13:13:00
0daydb
0daydb
Background Intelligent Transfer Service CVE-2020-0787 - Privilege Escalation
2020-06-12 13:15:16
avleonov
avleonov
Microsoft Patch Tuesday February 2020
2020-02-13 14:50:34
Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020
2021-01-11 01:50:44
Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies
2020-03-22 01:15:34
hivepro
hivepro
Russian state-sponsored cyber actors targeting U.S. critical infrastructure
2022-02-18 12:20:35
ics
ics
Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology
2022-02-16 12:00:00
Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks
2022-02-24 12:00:00
Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity
2020-10-24 12:00:00
malwarebytes
malwarebytes
Threat profile: Egregor ransomware is making a name for itself
2020-12-15 13:58:58
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4577668)
2020-10-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4577671)
2020-10-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4580330)
2020-10-14 00:00:00
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage
2020-02-13 08:22:46

0.973 High

EPSS

Percentile

99.9%

JSON
Related for AKB:E6BD4207-BAC0-40E1-A4C8-92B6D3D58D4B
qualysblog10nvd4mscve8prion4checkpoint_advisories4cvelist4metasploit3cisa3srcincite2packetstorm4nuclei1cve4zdt4githubexploit19rapid7blog7threatpost38exploitpack1securelist4mskb11attackerkb5zdi1cisa_kev1taosecurity1trendmicroblog1mssecure2canvas1trellix2krebs4nessus9exploitdb2kaspersky3thn90daydb1avleonov4hivepro1ics8malwarebytes1openvas5googleprojectzero1talosblog1