vulnerability
Microsoft SharePoint: CVE-2020-1439: PerformancePoint Services Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Jul 14, 2020 | May 15, 2023 | Aug 12, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Jul 14, 2020
Added
May 15, 2023
Modified
Aug 12, 2025
Description
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.
Solutions
microsoft-sharepoint-sharepoint_2016-kb4484436microsoft-sharepoint-sharepoint_2016-kb4484440microsoft-sharepoint-sharepoint_2019-kb4484453
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.