Known Exploited Vulnerability
7.8
HIGH
CVSS 3.1
CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability - [Actively Exploited]
Overview
Description
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
Details
INFO
Published Date :
July 14, 2020, 11:15 p.m.
Last Modified :
June 17, 2026, 3 a.m.
Remotely Exploit :
No
Source :
[email protected]
CISA Notification
CISA KEV (Known Exploited Vulnerabilities)
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.
Due Date:
May 03, 2022
Alert Date:
Nov 03, 2021
| 1716
days
ago
Description :
Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.
Required Action :
Apply updates per vendor instructions.
Known Ransomware Campaign Use:
Unknown
Notes :
https://nvd.nist.gov/vuln/detail/CVE-2020-1147
Impact
Affected Products
The following products are affected by CVE-2020-1147
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 2.0 | MEDIUM | [email protected] | ||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 3.1 | HIGH | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
Solution
A remote code execution vulnerability exists in multiple Microsoft products; applying the latest security updates is the recommended remediation.
- Update the affected packages.
- Apply the appropriate security or cumulative updates.
Public PoC/Exploit Available at Github
CVE-2020-1147 has a 20 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2020-1147.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2020-1147 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2020-1147
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Drop-in security awareness for AI coding assistants — OWASP, CWE, NIST and language-specific rules for Claude Code, Gemini Antigravity, Cursor and OpenAI Codex.
PowerShell Shell TypeScript
Updated: 4 months ago
0 stars
0 fork
0 watcher
Born at : Feb. 23, 2026, 9:52 p.m.
This repo has been linked 23 different CVEs too.
None
C#
Updated: 1 year, 7 months ago
1 stars
0 fork
0 watcher
Born at : Nov. 29, 2024, 3:14 p.m.
This repo has been linked 17 different CVEs too.
News about technology and digital stuff
Updated: 1 month, 1 week ago
0 stars
0 fork
0 watcher
Born at : Nov. 4, 2024, 1:06 p.m.
This repo has been linked 18 different CVEs too.
None
C#
Updated: 1 year, 10 months ago
0 stars
0 fork
0 watcher
Born at : Sept. 3, 2024, 7:41 p.m.
This repo has been linked 17 different CVEs too.
None
Updated: 1 year ago
9 stars
1 fork
1 watcher
Born at : Feb. 27, 2024, 3:28 p.m.
This repo has been linked 22 different CVEs too.
None
C#
Updated: 2 years, 4 months ago
0 stars
0 fork
0 watcher
Born at : Feb. 25, 2024, 3:15 p.m.
This repo has been linked 17 different CVEs too.
None
CSS HTML JavaScript
Updated: 2 years, 5 months ago
0 stars
0 fork
0 watcher
Born at : Feb. 2, 2024, 2:11 p.m.
This repo has been linked 494 different CVEs too.
差异：输出macos 能运行的工具
C#
Updated: 2 years, 7 months ago
3 stars
0 fork
0 watcher
Born at : Nov. 30, 2023, 6:16 a.m.
This repo has been linked 17 different CVEs too.
An automated repo to track Nuclei template scanning capabilities against the CISA KEV.
cisa-kev nuclei scanning vulnerabilities cisa
Makefile Python Shell
Updated: 1 month, 1 week ago
3 stars
0 fork
0 watcher
Born at : April 27, 2023, 6:25 p.m.
This repo has been linked 593 different CVEs too.
Deserialization payload generator for a variety of .NET formatters
C#
Updated: 19 hours, 11 minutes ago
181 stars
21 fork
21 watcher
Born at : Aug. 17, 2022, 1:01 p.m.
This repo has been linked 18 different CVEs too.
None
Updated: 4 years ago
0 stars
0 fork
0 watcher
Born at : July 6, 2022, 8:40 a.m.
This repo has been linked 157 different CVEs too.
None
Updated: 1 year, 11 months ago
0 stars
0 fork
0 watcher
Born at : July 6, 2022, 8:40 a.m.
This repo has been linked 153 different CVEs too.
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
cisa-kev vulnerability 0day cisa exploits
Updated: 3 months, 4 weeks ago
607 stars
44 fork
44 watcher
Born at : April 19, 2022, 8:58 a.m.
This repo has been linked 1295 different CVEs too.
None
Updated: 1 year ago
26 stars
3 fork
3 watcher
Born at : June 30, 2021, 6:25 a.m.
This repo has been linked 5 different CVEs too.
None
Python XSLT
Updated: 1 year, 3 months ago
20 stars
5 fork
5 watcher
Born at : May 22, 2021, 4:29 p.m.
This repo has been linked 350 different CVEs too.
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2020-1147 vulnerability anywhere in the article.
-
Kaspersky
ToolShell: a story of five vulnerabilities in Microsoft SharePoint
On July 19–20, 2025, various security companies and national CERTs published alerts about active exploitation of on-premise SharePoint servers. According to the reports, observed attacks did not requi ... Read more
Published Date:
Jul 25, 2025 (11 months, 3 weeks ago)
The following table lists the changes that have been made to the
CVE-2020-1147 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Microsoft', 'product': 'Microsoft SharePoint Enterprise Server', 'versions': [{'status': 'affected', 'version': '2016'}, {'status': 'affected', 'version': '2013 Service Pack 1'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft SharePoint Server', 'versions': [{'status': 'affected', 'version': '2019'}, {'status': 'affected', 'version': '2010 Service Pack 2'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft Visual Studio 2019', 'versions': [{'status': 'affected', 'version': '16.0'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': '.NET Core', 'versions': [{'status': 'affected', 'version': '2.1'}, {'status': 'affected', 'version': '3.1'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2', 'versions': [{'status': 'affected', 'version': 'Windows 7 for 32-bit Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows 7 for x64-based Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows 8.1 for 32-bit systems'}, {'status': 'affected', 'version': 'Windows 8.1 for x64-based systems'}, {'status': 'affected', 'version': 'Windows RT 8.1'}, {'status': 'affected', 'version': 'Windows Server 2008 R2 for x64-based Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)'}, {'status': 'affected', 'version': 'Windows Server 2012'}, {'status': 'affected', 'version': 'Windows Server 2012 (Server Core installation)'}, {'status': 'affected', 'version': 'Windows Server 2012 R2'}, {'status': 'affected', 'version': 'Windows Server 2012 R2 (Server Core installation)'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2016', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows RT 8.1', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2012', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2012 R2', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation)', 'versions': [{'status': 'affected', 'version': '1903'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803 (Server Core Installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.6', 'versions': [{'status': 'affected', 'version': 'Windows Server 2008 for 32-bit Systems Service Pack 2'}, {'status': 'affected', 'version': 'Windows Server 2008 for x64-based Systems Service Pack 2'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 2.0', 'versions': [{'status': 'affected', 'version': 'Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2'}, {'status': 'affected', 'version': 'Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.0', 'versions': [{'status': 'affected', 'version': 'Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2'}, {'status': 'affected', 'version': 'Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5', 'versions': [{'status': 'affected', 'version': 'Windows 8.1 for 32-bit systems'}, {'status': 'affected', 'version': 'Windows 8.1 for x64-based systems'}, {'status': 'affected', 'version': 'Windows Server 2012'}, {'status': 'affected', 'version': 'Windows Server 2012 (Server Core installation)'}, {'status': 'affected', 'version': 'Windows Server 2012 R2'}, {'status': 'affected', 'version': 'Windows Server 2012 R2 (Server Core installation)'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5.1', 'versions': [{'status': 'affected', 'version': 'Windows 7 for 32-bit Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows 7 for x64-based Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows Server 2008 R2 for x64-based Systems Service Pack 1'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 4.5.2', 'versions': [{'status': 'affected', 'version': 'Windows 7 for 32-bit Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows 7 for x64-based Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows 8.1 for 32-bit systems'}, {'status': 'affected', 'version': 'Windows 8.1 for x64-based systems'}, {'status': 'affected', 'version': 'Windows RT 8.1'}, {'status': 'affected', 'version': 'Windows Server 2008 for 32-bit Systems Service Pack 2'}, {'status': 'affected', 'version': 'Windows Server 2008 for x64-based Systems Service Pack 2'}, {'status': 'affected', 'version': 'Windows Server 2008 R2 for x64-based Systems Service Pack 1'}, {'status': 'affected', 'version': 'Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)'}, {'status': 'affected', 'version': 'Windows Server 2012'}, {'status': 'affected', 'version': 'Windows Server 2012 (Server Core installation)'}, {'status': 'affected', 'version': 'Windows Server 2012 R2'}, {'status': 'affected', 'version': 'Windows Server 2012 R2 (Server Core installation)'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for ARM64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for x64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 2004 (Server Core installation)', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for ARM64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for ARM64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for 32-bit Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}, {'vendor': 'Microsoft', 'product': 'Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for ARM64-based Systems', 'versions': [{'status': 'affected', 'version': 'unspecified'}]}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2020-1147', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'active'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2025-02-04T19:25:47.186130Z'} -
Modified Analysis by [email protected]
Oct. 29, 2025
Action Type Old Value New Value Added Reference Type CISA-ADP: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147 Types: US Government Resource -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Oct. 22, 2025
Action Type Old Value New Value Added Reference https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147 -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Oct. 21, 2025
Action Type Old Value New Value Removed Reference https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147 -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Oct. 21, 2025
Action Type Old Value New Value Added Reference https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147 -
Modified Analysis by [email protected]
Feb. 11, 2025
Action Type Old Value New Value -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Feb. 04, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html Added Reference http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html Added Reference http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html Added Reference https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 Added Reference https://www.exploitalert.com/view-details.html?id=35992 -
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
CWE Remap by [email protected]
Jul. 12, 2022
Action Type Old Value New Value Changed CWE NVD-CWE-noinfo NVD-CWE-Other -
Modified Analysis by [email protected]
Apr. 01, 2022
Action Type Old Value New Value Changed Reference Type http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html No Types Assigned http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html Exploit, Third Party Advisory, VDB Entry Changed Reference Type http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html No Types Assigned http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry Changed Reference Type http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html No Types Assigned http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry Changed Reference Type https://www.exploitalert.com/view-details.html?id=35992 No Types Assigned https://www.exploitalert.com/view-details.html?id=35992 Exploit, Third Party Advisory -
CVE Modified by [email protected]
Jul. 23, 2021
Action Type Old Value New Value Added Reference http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html [No Types Assigned] -
CVE Modified by [email protected]
Aug. 20, 2020
Action Type Old Value New Value Added Reference https://www.exploitalert.com/view-details.html?id=35992 [No Types Assigned] -
CVE Modified by [email protected]
Aug. 17, 2020
Action Type Old Value New Value Added Reference http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html [No Types Assigned] -
CVE Modified by [email protected]
Jul. 31, 2020
Action Type Old Value New Value Added Reference http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html [No Types Assigned] -
Reanalysis by [email protected]
Jul. 23, 2020
Action Type Old Value New Value Added CVSS V2 Metadata Victim must voluntarily interact with attack mechanism Removed CVSS V2 NIST (AV:N/AC:L/Au:N/C:P/I:P/A:P) Added CVSS V2 NIST (AV:N/AC:M/Au:N/C:P/I:P/A:P) Removed CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Added CVSS V3.1 NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Changed CPE Configuration OR *cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:* *cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:* versions from (including) 15.0 up to (including) 15.9 *cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 16.6 *cpe:2.3:o:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:* OR *cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:* *cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:* *cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:* versions from (including) 15.0 up to (including) 15.9 *cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 16.6 -
Initial Analysis by [email protected]
Jul. 21, 2020
Action Type Old Value New Value Added CVSS V2 NIST (AV:N/AC:L/Au:N/C:P/I:P/A:P) Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Changed Reference Type https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 No Types Assigned https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 Patch, Vendor Advisory Added CWE NIST NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_core:3.1:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Added CPE Configuration AND OR *cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* Added CPE Configuration OR *cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:* *cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* *cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:* versions from (including) 15.0 up to (including) 15.9 *cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 16.6 *cpe:2.3:o:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.