CVE-2019-0558

Published: Jan 8, 2019Modified: Feb 28, 2025

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.

Affected (4)

Products: Microsoft: Business Productivity Servers, Sharepoint Server

Microsoft

2 products

Business Productivity Servers

Sharepoint Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Business Productivity Servers	Version 2010 sp2
Microsoft Sharepoint Server	Version 2013 sp1
Microsoft Sharepoint Server	Version 2016
Microsoft Sharepoint Server	Version 2019