9.8 Critical Exploited · ransomware

CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Known to be used

Weakness CWE-20

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft SharePoint Server	2019	No fix stated
Microsoft SharePoint Foundation	Versions not published
Microsoft SharePoint Enterprise Server	2016	No fix stated

References

106914 www.securityfocus.com
portal.msrc.microsoft.com portal.msrc.microsoft.com

Timeline

Published March 6, 2019
Added to the KEV catalogue November 3, 2021
Last modified October 21, 2025

The 95 CVEs of Microsoft SharePoint Server →

CVE-2020-1456 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Medium CVE-2020-1454 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an… 5.4 Medium CVE-2020-1451 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Medium CVE-2020-1450 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Medium

Track this CVE