CVE-2020-1147
Microsoft SharePoint Enterprise Server, Microsoft SharePoint Server, Microsoft Visual Studio 2019
Published 14 Jul 2020 · updated 17 Jun 2026 · Analyzed
7.8 High · CVSS 3.1, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 3 Nov 2021, with a remediation deadline of 3 May 2022 for US federal agencies.
Required action: Apply updates per vendor instructions.
Description
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
References
- packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html · Exploit, Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html · Exploit, Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html · Exploit, Third Party Advisory, VDB Entry
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 · Patch, Vendor Advisory
- www.exploitalert.com/view-details.html?id=35992 · Exploit, Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147 · US Government Resource