CVE-2019-0952

published 2019-05-16

CVE-2019-0952: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka…

high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
microsoft	microsoft_sharepoint_enterprise_server	—	—
microsoft	microsoft_sharepoint_foundation	—	—
microsoft	sharepoint_enterprise_server	—	—
microsoft	sharepoint_foundation	—	—
msrc	microsoft_sharepoint_enterprise_server_2016	—	—
msrc	microsoft_sharepoint_foundation_2013_service_pack_1	—	—