This security update resolves cross-site-scripting (XSS) vulnerabilities that exist if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn more about these vulnerabilities, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2020-0923
- Microsoft Common Vulnerabilities and Exposures CVE-2020-0926
- Microsoft Common Vulnerabilities and Exposures CVE-2020-0930
- Microsoft Common Vulnerabilities and Exposures CVE-2020-0931
- Microsoft Common Vulnerabilities and Exposures CVE-2020-0973
- Microsoft Common Vulnerabilities and Exposures CVE-2020-0977
Note To apply this security update, you must have the release version of Service Pack 1 for Microsoft SharePoint Server 2013 installed on the computer.