{"metadata": {"vulnerability": "cve-2020-0646", "count": 54, "kinds": {"milestone": 5, "sighting": 18, "kev": 11, "other": 20}}, "data": [{"timestamp": "2019-11-04T00:00:00Z", "date_only": false, "value": "2019-11-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-0646", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-01-14T00:00:00Z", "date_only": false, "value": "2020-01-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-027", "record": "CERTFR-2020-AVI-027", "field": "last_revision_date"}, {"timestamp": "2020-01-14T00:00:00Z", "date_only": false, "value": "2020-01-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-027", "record": "CERTFR-2020-AVI-027", "field": "initial_release_date"}, {"timestamp": "2020-01-14T00:00:00Z", "date_only": false, "value": "2020-01-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-027", "record": "CERTFR-2020-AVI-027", "field": "revisions.0.revision_date"}, {"timestamp": "2020-01-14T23:11:38Z", "date_only": false, "value": "2020-01-14T23:11:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-0646", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-01-14T23:15:00Z", "date_only": false, "value": "2020-01-14T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4W3V-83V8-MG94", "record": "GHSA-4W3V-83V8-MG94", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-01-14T23:15:00Z", "date_only": false, "value": "2020-01-14T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-0646", "record": "GSD-2020-0646", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-01-14T23:15:33.143Z", "date_only": false, "value": "2020-01-14T23:15:33.143", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-0646", "record": "FKIE_CVE-2020-0646", "field": "published"}, {"timestamp": "2020-01-16T00:00:00Z", "date_only": true, "value": "2020-01-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-03547", "record": "CNVD-2020-03547", "field": "submitTime"}, {"timestamp": "2020-02-04T00:00:00Z", "date_only": true, "value": "2020-02-04", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-03547", "record": "CNVD-2020-03547", "field": "openTime"}, {"timestamp": "2020-03-25T16:34:46Z", "date_only": false, "value": "2020-03-25T16:34:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_workflows_xoml.rb", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "7e0a4f57-231d-4421-8c55-c7a564272cc2", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_workflows_xoml.rb"}, {"timestamp": "2020-03-26T16:06:02Z", "date_only": false, "value": "2020-03-26T16:06:02.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2020-0646", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-03-31T00:00:00Z", "date_only": false, "value": "2020-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/48275", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "815ceadc-c2ab-4c41-8b81-6647286f4a6e", "url": "https://www.exploit-db.com/exploits/48275"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/18", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "e5c02a6a-c3ce-4a86-a47b-b1c94707bead", "content": "CVE-2020-0646 SharePoint RCE\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-0646_SharePoint_RCE%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/18"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-0646", "field": "timestamps.asserted_at", "uuid": "5151afe7-fe5b-4c6d-9152-be78516a34b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-0646", "field": "timestamps.asserted_at", "uuid": "dcf866e4-b864-44c2-95c3-2f51cc86e31a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-0646", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-0646", "record": "GSD-2020-0646", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-0646", "field": "evidence.0.details.added_date", "uuid": "dcf866e4-b864-44c2-95c3-2f51cc86e31a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-0646", "field": "evidence.0.details.date_added", "uuid": "5151afe7-fe5b-4c6d-9152-be78516a34b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-0646", "field": "timestamps.first_seen_at", "uuid": "5151afe7-fe5b-4c6d-9152-be78516a34b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-0646", "field": "timestamps.first_seen_at", "uuid": "dcf866e4-b864-44c2-95c3-2f51cc86e31a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-0646", "field": "status.status_updated_at", "uuid": "5151afe7-fe5b-4c6d-9152-be78516a34b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-0646", "field": "status.status_updated_at", "uuid": "dcf866e4-b864-44c2-95c3-2f51cc86e31a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-0646", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:19Z", "date_only": false, "value": "2021-11-08T08:58:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "d0ef5a6f-58c0-49dc-acce-fc87c589677c"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "6d5750fe-5dae-4e35-b822-0daadbb179fe"}, {"timestamp": "2022-01-01T20:03:00Z", "date_only": false, "value": "2022-01-01T20:03Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-0646", "record": "GSD-2020-0646", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-0646", "field": "evidence.0.details.due_date", "uuid": "5151afe7-fe5b-4c6d-9152-be78516a34b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-0646", "record": "GSD-2020-0646", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:06:20Z", "date_only": false, "value": "2022-05-24T17:06:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4W3V-83V8-MG94", "record": "GHSA-4W3V-83V8-MG94", "field": "published"}, {"timestamp": "2023-12-13T01:21:44.671Z", "date_only": false, "value": "2023-12-13T01:21:44.671914Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-0646", "record": "GSD-2020-0646", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T01:14:15Z", "date_only": false, "value": "2023-12-18T01:14:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1879", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "001e506a-2234-4d53-9cb2-6fa7bad3e85c", "content": "#ExploitObserverAlert\n\nCVE-2020-0646\n\nDESCRIPTION: Exploit Observer has 22 entries related to CVE-2020-0646. A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.\n\nFIRST-EPSS: 0.975210000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1879"}, {"timestamp": "2024-08-04T06:11:05.635Z", "date_only": false, "value": "2024-08-04T06:11:05.635Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-0646", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-18T16:27:37Z", "date_only": false, "value": "2024-10-18T16:27:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/862", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "af397e30-31b1-417e-a14c-7f7675bbf863", "content": "#exploit\n1. CVE-2020-8515:\nDrayTek Vigor 2960 1.3.1, 3900 1.4.4, Vigor 300B 1.3.3, 1.4.2, 1.4.4 devices allow RCE as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI\nhttps://blog.netlab.360.com/two-zero-days-are-targeting-draytek-broadband-cpe-devices-en\n\n2. CVE-2020-0646:\nSharePoint Workflows XOML Injection\nhttps://www.mdsec.co.uk/2020/01/code-injection-in-workflows-leading-to-sharepoint-rce-cve-2020-0646/?fbclid=IwAR0b4QZxdQKVYN-ES62rdt9yN5MMzfgpK7DkdkbIq44Flm-ODiuqzeIglUQ\n]-> PoC: https://packetstormsecurity.com/files/156930/sharepoint_workflows_xoml.rb.txt", "url": "https://t.me/CyberSecurityTechnologies/862"}, {"timestamp": "2024-12-24T20:22:35.064Z", "date_only": false, "value": "2024-12-24T20:22:35.064760Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970978", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "20a33c67-048b-4388-a253-ab8df80ec913", "url": "https://feedsin.space/feed/CISAKevBot/items/2970978"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "b974c4e0-6371-477b-bba5-08ddabec1b1f"}, {"timestamp": "2025-02-07T15:18:23.162Z", "date_only": false, "value": "2025-02-07T15:18:23.162213Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-0646", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-07T15:18:23.162Z", "date_only": false, "value": "2025-02-07T15:18:23.162213Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-0646", "record": "FKIE_CVE-2020-0646", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:09:44Z", "date_only": false, "value": "2025-02-23T02:09:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "724ca81d-0a4f-4be4-b77d-a8549a7d1b3d"}, {"timestamp": "2025-02-23T04:10:20Z", "date_only": false, "value": "2025-02-23T04:10:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "ea8eaab6-965f-469b-944d-055f39f619ee"}, {"timestamp": "2025-08-06T13:54:20Z", "date_only": false, "value": "2025-08-06T13:54:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "a840917d-3e0b-4439-a567-f3d17f437329"}, {"timestamp": "2025-08-14T11:44:24Z", "date_only": false, "value": "2025-08-14T11:44:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "b601e271-9199-49ab-bc98-246a088fe289"}, {"timestamp": "2025-10-21T23:35:53.664Z", "date_only": false, "value": "2025-10-21T23:35:53.664Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-0646", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:53.664Z", "date_only": false, "value": "2025-10-21T23:35:53.664Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-0646", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:49Z", "date_only": false, "value": "2025-10-22T00:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4W3V-83V8-MG94", "record": "GHSA-4W3V-83V8-MG94", "field": "modified"}, {"timestamp": "2026-02-02T12:28:57.224Z", "date_only": false, "value": "2026-02-02T12:28:57.224052Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/342659ae-0139-40e8-8b19-827238116dc9", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "1393c39e-275b-4477-a644-13b5a89ebdbd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/342659ae-0139-40e8-8b19-827238116dc9"}, {"timestamp": "2026-02-02T12:28:57.224Z", "date_only": false, "value": "2026-02-02T12:28:57.224052Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/342659ae-0139-40e8-8b19-827238116dc9", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "da518506-0f79-4548-9a44-79a613d4e0c8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/342659ae-0139-40e8-8b19-827238116dc9"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-0646", "field": "timestamps.recorded_at", "uuid": "5151afe7-fe5b-4c6d-9152-be78516a34b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T02:46:15.230Z", "date_only": false, "value": "2026-06-17T02:46:15.230", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-0646", "record": "FKIE_CVE-2020-0646", "field": "lastModified"}, {"timestamp": "2026-06-19T12:48:00.813Z", "date_only": false, "value": "2026-06-19T12:48:00.813793Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dcb139ac-49e1-4b28-9ca5-136d777bac4b", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "b289d445-f6d4-4245-a829-8d0297a2d751", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dcb139ac-49e1-4b28-9ca5-136d777bac4b"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-0646", "field": "timestamps.recorded_at", "uuid": "dcf866e4-b864-44c2-95c3-2f51cc86e31a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:12.125Z", "date_only": false, "value": "2026-06-23T11:13:12.125831Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/dcf866e4-b864-44c2-95c3-2f51cc86e31a", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "262dbe1b-fcb1-48d7-ba01-575631f4f774", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/dcf866e4-b864-44c2-95c3-2f51cc86e31a"}, {"timestamp": "2026-06-23T14:04:33.630Z", "date_only": false, "value": "2026-06-23T14:04:33.630227Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ceff2ed1-3f36-40ec-9cf8-9a070f87989f", "record": "CVE-2020-0646", "field": "creation_timestamp", "uuid": "8202a963-91f0-4810-8b5f-09c6768492de", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ceff2ed1-3f36-40ec-9cf8-9a070f87989f"}]}