CVE-2019-0594

Опубликовано: 05 мар. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.

Ссылки

http://www.securityfocus.com/bid/106866
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0594
Patch
Vendor Advisory
http://www.securityfocus.com/bid/106866
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0594
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.38691

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2019-0594

msrc

больше 6 лет назад

Microsoft SharePoint Remote Code Execution Vulnerability

GHSA-gf89-xg9v-q7v4

CVSS3: 8.8

github

больше 3 лет назад

BDU:2019-00784

CVSS3: 9.8

fstec