9.8
Critique
Exploitée
· rançongiciel
CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-20
Description
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft SharePoint Server | 2019 | Pas de correctif indiqué |
| Microsoft SharePoint Foundation | Versions non publiées | |
| Microsoft SharePoint Enterprise Server | 2016 | Pas de correctif indiqué |
Références
- 106914 www.securityfocus.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Microsoft SharePoint Server
Les 95 CVE de Microsoft SharePoint Server →
CVE-2020-1456
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Moyenne
CVE-2020-1454
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an…
5.4
Moyenne
CVE-2020-1451
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Moyenne
CVE-2020-1450
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Moyenne