CVEvulnerability

CVE-2019-0952

8.8 HIGH Published 2019-05-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.

Affected configurations

• microsoft sharepoint enterprise server 2016 • microsoft sharepoint foundation 2013

References