CVE-2019-0556: XSS

Published Jan 8, 2019

Updated

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557, CVE-2019-0558.

Affected Software

1 affected component

Microsoft SharePoint Server=2013-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0556

Event History

Jan 8, 2019

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Data Sourced

via NVD·09:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-0556?

CVE-2019-0556 has a severity rating of important according to Microsoft.

How do I fix CVE-2019-0556?

To fix CVE-2019-0556, apply the relevant security updates provided by Microsoft for SharePoint Server.

What systems are affected by CVE-2019-0556?

CVE-2019-0556 affects Microsoft SharePoint Server 2013 Service Pack 1.

What type of vulnerability is CVE-2019-0556?

CVE-2019-0556 is a cross-site scripting (XSS) vulnerability.

What does CVE-2019-0556 allow an attacker to do?

CVE-2019-0556 allows an attacker to execute arbitrary scripts in the context of a user’s session due to improper input sanitization.