5.4
Medium
CVE-2019-0558 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
Description
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft SharePoint Server | 2019 | No fix stated |
| Microsoft SharePoint | Versions not published | |
| Microsoft Business Productivity Servers | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 106389 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft SharePoint Server
The 95 CVEs of Microsoft SharePoint Server →
CVE-2020-1456
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Medium
CVE-2020-1454
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an…
5.4
Medium
CVE-2020-1451
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Medium
CVE-2020-1450
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Medium