CVE-2019-1295
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257, CVE-2019-1296.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - secure@microsoft.com
- Published
- 2019-09-11
- Last modified
- 2024-08-04
- Weaknesses
- CWE-20
Affected products
- Microsoft Sharepoint Enterprise Server (Microsoft)
- Microsoft Sharepoint Foundation (Microsoft)
- Microsoft Sharepoint Server (Microsoft)
- Sharepoint Enterprise Server (Microsoft)
- Sharepoint Foundation (Microsoft)
- Sharepoint Server (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1295
