Back to CVE Browser

CVE-2019-0604

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score31.1970%

EPSS Percentile96.00th

PublishedMar 5, 2019

Last ModifiedOct 29, 2025

Vulnerability Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Affected Platforms (CPE)

📦

Microsoft

Sharepoint Enterprise Server

= 2016

📦

Microsoft

Sharepoint Foundation

= 2013

📦

Microsoft

Sharepoint Server

= 2010

📦

Microsoft

Sharepoint Server

= 2019

References & Advisories

🔗 http://www.securityfocus.com/bid/106914

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604

🔗 http://www.securityfocus.com/bid/106914

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0604

Related Vulnerabilities

CVE-2017-119368.8

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled...

CVE-2018-09138.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...

CVE-2017-118768.8

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read conte...

CVE-2018-09148.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...