返回 CVE 浏览器

CVE-2019-0604

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score31.1970%

EPSS Percentile96.00th

Published2019年3月5日

Last Modified2025年10月29日

Vulnerability Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Affected Platforms (CPE)

📦

Microsoft

Sharepoint Enterprise Server

= 2016

📦

Microsoft

Sharepoint Foundation

= 2013

📦

Microsoft

Sharepoint Server

= 2010

📦

Microsoft

Sharepoint Server

= 2019

References & Advisories

🔗 http://www.securityfocus.com/bid/106914

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604

🔗 http://www.securityfocus.com/bid/106914

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0604

相关漏洞威胁

CVE-2017-119368.8

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled...

CVE-2018-09138.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...

CVE-2017-118768.8

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read conte...

CVE-2018-09148.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...