CVE-2019-0594

🗓️ 06 Mar 2019 00:00:00Reported by microsoftType

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604

Reporter	Title	Published	Views	Family All 28
ATTACKERKB	CVE-2019-0594	5 Mar 201900:00	–	attackerkb
ATTACKERKB	CVE-2019-0604	5 Mar 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management relates to errors in code generation, allowing an attacker to execute arbitrary code.	26 Feb 201900:00	–	bdu_fstec
Circl	CVE-2019-0594	13 Feb 201914:35	–	circl
CNVD	Microsoft SharePoint Input Validation Error Vulnerability (CNVD-2019-39027)	14 Feb 201900:00	–	cnvd
CVE	CVE-2019-0594	6 Mar 201900:00	–	cve
Microsoft KB	Description of the security update for SharePoint Foundation 2010: February 12, 2019	12 Feb 201908:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: February 12, 2019	12 Feb 201908:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: February 12, 2019	12 Feb 201908:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: February 12, 2019	12 Feb 201908:00	–	mskb

[
  {
    "product": "Microsoft SharePoint Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2"
      },
      {
        "status": "affected",
        "version": "2019"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Foundation",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Enterprise Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0594
securityfocus	www.securityfocus.com/bid/106866

06 Mar 2019 10:57Current

9.6High risk

Vulners AI Score9.6

EPSS0.25766