Vendor / Project: Microsoft Product: SharePoint Description: Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account. Required Action: Apply updates per vendor instructions. Due Date: 2022-05-03 Ransomware Campaign Use: Known CWEs: CWE-20 Notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0604
CVE-2019-0604 — Microsoft SharePoint Remote Code Execution Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2021-11-03 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 9.8
- Quelle-ID:
cisa_kev - uid_hash:
4f7cd5f1ecc068d70cde268e620bf8fc874f717b8d385006825c2d0add842c08
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2019-03-06 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |