Microsoft SharePoint Remote Code Execution Vulnerability
Critical Listed in CISA KEV
Summary
Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Microsoft:SharePoint
Sources
- CISA KEV DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2019-0604 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV