CVE-2019-1257

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1295, CVE-2019-1296.

Score

CVSS 3.1 8.8 High

Status

Modified - secure@microsoft.com

Published

2019-09-11

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Microsoft Sharepoint Enterprise Server (Microsoft)
• Microsoft Sharepoint Foundation (Microsoft)
• Microsoft Sharepoint Server (Microsoft)
• Sharepoint Enterprise Server (Microsoft)
• Sharepoint Foundation (Microsoft)
• Sharepoint Server (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1257