← Back

CVE-2019-0604

nvd nistnuclei
Published: Mar 5, 2019Modified: Oct 29, 2025CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Affected (4)

Microsoft
3 products
Sharepoint Enterprise Server
Sharepoint Foundation
Sharepoint Server
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Sharepoint Enterprise Server
Version 2016
Sharepoint Foundation
Version 2013 sp1
Microsoft
Sharepoint Server
Version 2010 sp2
Sharepoint Server
Version 2019

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (5)

Source: secure@microsoft.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.