CVE-2019-0558

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.

Score

CVSS 3.1 5.4 Medium

Status

Modified - secure@microsoft.com

Published

2019-01-08

Last modified

2025-02-28

Weaknesses

CWE-79

Affected products

• Business Productivity Servers (Microsoft)
• Microsoft Business Productivity Servers (Microsoft)
• Microsoft Sharepoint (Microsoft)
• Microsoft Sharepoint Server (Microsoft)
• Sharepoint Server (Microsoft)

References

• http://www.securityfocus.com/bid/106389
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558