Microsoft · Security update · September 8, 2020

KB4484506: September 2020 security update

KB4484506, released September 8, 2020, fixes 15 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
15
7 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0383
90th percentile

Priority of the 15 CVEs

Patch now 0 Urgent 7 High 3 Routine 5

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2020-1460 Microsoft Office SharePoint Remote Code Execution 8.6 0.0370 Exploitation Less Likely
Urgent CVE-2020-1452 Microsoft Office SharePoint Remote Code Execution 8.6 0.0215 Exploitation Less Likely
Urgent CVE-2020-1453 Microsoft Office SharePoint Remote Code Execution 8.6 0.0215 Exploitation Less Likely
Urgent CVE-2020-1200 Microsoft Office SharePoint Remote Code Execution 8.6 0.0207 Exploitation Less Likely
Urgent CVE-2020-1595 Microsoft Office SharePoint Remote Code Execution 9.9 0.0198 Exploitation Less Likely
Urgent CVE-2020-1210 Microsoft Office SharePoint Remote Code Execution 9.9 0.0190 Exploitation Less Likely
Urgent CVE-2020-1576 Microsoft Office SharePoint Remote Code Execution 8.5 0.0161 Exploitation Less Likely
High CVE-2020-1218 Microsoft Office Remote Code Execution 7.8 0.0383 Exploitation Less Likely
High CVE-2020-1345 Microsoft Office SharePoint Spoofing 7.4 0.0268 Exploitation Less Likely
High CVE-2020-1198 Microsoft Office SharePoint Spoofing 7.4 0.0267 None reported
Routine CVE-2020-1482 Microsoft Office SharePoint Spoofing 6.3 0.0198 Exploitation Less Likely
Routine CVE-2020-1440 Microsoft Office SharePoint Tampering 6.3 0.0181 Exploitation Less Likely
Routine CVE-2020-1205 Microsoft Office SharePoint Spoofing 4.6 0.0177 Exploitation Less Likely
Routine CVE-2020-1514 Microsoft Office SharePoint Spoofing 5.4 0.0164 Exploitation Less Likely
Routine CVE-2020-1227 Microsoft Office SharePoint Spoofing 5.4 0.0163 None reported
Showing 1 to 15 of 15 1