CVE-2020-1147

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.940 · 100 %ileexploit · weaponizedEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 3 exploits · weaponized

Likely / severe?

94.0% (100th) EPSS

CVSS 6.8 · medium

Is it mine?

177 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · redhat_csaf

added 2021-11-03remediate by 2022-05-03

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-23

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedaspnetcore-runtime-3.1-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixedaspnetcore-targeting-pack-3.1-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-0:3.1.106-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-apphost-pack-3.1-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-apphost-pack-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-host-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-host-debuginfo-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-hostfxr-3.1-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-hostfxr-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-runtime-3.1-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-runtime-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-sdk-3.1-0:3.1.106-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-sdk-3.1-debuginfo-0:3.1.106-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-targeting-pack-3.1-0:3.1.6-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet-templates-3.1-0:3.1.106-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet3.1-0:3.1.106-1.el8_2.src as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet3.1-debuginfo-0:3.1.106-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixeddotnet3.1-debugsource-0:3.1.106-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954
Fixednetstandard-targeting-pack-2.1-0:3.1.106-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:2954

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.8–9.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondaryexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · OSV

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-91US

exploits (3)

Public proof-of-concept and weaponised exploit code.

exploit/windows/http/sharepoint_data_deserializationSharePoint DataSet / DataTable Deserializationweaponized · metasploit
EDB-48747Microsoft SharePoint Server 2019 - Remote Code ExecutionPoC · exploit_db
EDB-50151Microsoft SharePoint Server 2019 - Remote Code Execution (2)PoC · exploit_db

affected products (177)

Products and version ranges known to be affected.

Microsoft .NET Core≤ 2.1enisa_euvdEU
Microsoft .NET Core≤ 3.1enisa_euvdEU
Microsoft Microsoft .NET Framework 2.0≤ Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2enisa_euvdEU
Microsoft Microsoft .NET Framework 2.0≤ Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2enisa_euvdEU
Microsoft Microsoft .NET Framework 3.0≤ Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2enisa_euvdEU
Microsoft Microsoft .NET Framework 3.0≤ Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2enisa_euvdEU
Microsoft Microsoft .NET Framework 3.5≤ Windows Server 2012enisa_euvdEU
Microsoft Microsoft .NET Framework 3.5≤ Windows Server 2012 R2 (Server Core installation)enisa_euvdEU
Microsoft Microsoft .NET Framework 3.5≤ Windows 8.1 for 32-bit systemsenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5≤ Windows Server 2012 R2enisa_euvdEU
Microsoft Microsoft .NET Framework 3.5≤ Windows Server 2012 (Server Core installation)enisa_euvdEU
Microsoft Microsoft .NET Framework 3.5≤ Windows 8.1 for x64-based systemsenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems≤ unspecifiedenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems≤ unspecifiedenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016≤ unspecifiedenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)≤ unspecifiedenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems≤ unspecifiedenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems≤ unspecifiedenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems≤ unspecifiedenisa_euvdEU
Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for ARM64-based Systems≤ unspecifiedenisa_euvdEU

showing 20 of 177

advisories (2)

Vendor and ecosystem advisories describing this.

RHSA-2020:2954Red Hat Security Advisory: .NET Core 3.1 security and bugfix update2020-07-15csaf · redhat_csafUS
An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
GHSA-g5vf-38cp-4px9.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability2022-05-24ghsa · osvUS
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu redhat_csaf osv NVD CVE.org MITRE

published 2020-07-14modified 2026-06-17

references (30)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan