CVE-2019-1295

Опубликовано: 11 сент. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257, CVE-2019-1296.

Ссылки

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1295
Patch
Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1295
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.38462

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2019-1295

msrc

около 6 лет назад

Microsoft SharePoint Remote Code Execution Vulnerability

GHSA-jqvv-p84x-4w7w

github

больше 3 лет назад

BDU:2019-03490

CVSS3: 7.5

fstec