Microsoft · Security update · April 14, 2020

KB4484298: April 2020 security update

KB4484298, released April 14, 2020, fixes 6 CVEs in Microsoft SharePoint Foundation 2010 Service Pack 2. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
6
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1318
96th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 1 High 5 Routine 0

Applies to

Product
Microsoft SharePoint Foundation 2010 Service Pack 2

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2020-0929 Microsoft Office SharePoint Remote Code Execution n/a 0.1070 Exploitation Less Likely
High CVE-2020-0971 Microsoft Office SharePoint Remote Code Execution n/a 0.1318 Exploitation Less Likely
High CVE-2020-0920 Microsoft Office SharePoint Remote Code Execution n/a 0.1041 Exploitation Less Likely
High CVE-2020-0972 Microsoft Office SharePoint Spoofing n/a 0.0163 Exploitation Less Likely
High CVE-2020-0975 Microsoft Office SharePoint Spoofing n/a 0.0163 Exploitation Less Likely
High CVE-2020-0925 Microsoft Office SharePoint Spoofing n/a 0.0152 Exploitation Less Likely
Showing 1 to 6 of 6 1