Skip to main content

Sharepoint Enterprise Server CVE-2020-17017

MEDIUM
2020-11-11 secure@microsoft.com
5.3
CVSS 3.1 · Vendor: microsoft
Share

Severity by source

Vendor (microsoft) PRIMARY
5.3 MEDIUM
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 11, 2020 - 07:15 cve.org
MEDIUM 5.3

DescriptionCVE.org

Microsoft SharePoint Information Disclosure Vulnerability

AnalysisAI

Microsoft SharePoint Information Disclosure Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable.

Technical ContextAI

Affected products include: Microsoft Sharepoint Enterprise Server, Microsoft Sharepoint Foundation, Microsoft Sharepoint Server.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-49706 MEDIUM POC
6.5 Jul 08

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a networ

CVE-2017-0003 HIGH POC
7.8 Jan 10

Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted

CVE-2021-31181 HIGH POC
8.8 May 11

Microsoft SharePoint Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely

CVE-2020-16952 HIGH POC
8.6 Oct 16

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark

CVE-2017-8742 HIGH
7.8 Sep 13

A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Serv

CVE-2020-1147 HIGH POC
7.8 Jul 14

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar

CVE-2025-47166 HIGH POC
8.8 Jun 10

Critical deserialization vulnerability in Microsoft Office SharePoint that allows authenticated attackers to execute arb

CVE-2023-24955 HIGH POC
7.2 May 09

Microsoft SharePoint Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is r

CVE-2023-21716 CRITICAL POC
9.8 Feb 14

Microsoft Word Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

CVE-2025-47163 HIGH
8.8 Jun 10

Critical deserialization vulnerability in Microsoft Office SharePoint that allows authenticated attackers to execute arb

CVE-2017-11936 HIGH
8.8 Dec 12

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests a

CVE-2025-29793 HIGH
7.2 Apr 08

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Share

CVE-2020-17017 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy