CVE-2020-1181

CVE-2020-1181 describes a remote code execution vulnerability in Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server. This flaw arises from the server's failure to properly identify and filter unsafe ASP.Net web controls. It carries a CVSS score of 8.8 (HIGH), indicating a network-based attack with low privileges, no user interaction required, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its high EPSS score and FAUCET Risk Score suggest a significant threat. Although no public exploit code (Metasploit, Nuclei, ExploitDB) is readily available, community discussion, including a Reddit post with a step-by-step Proof of Concept, indicates active interest and potential for exploitation.